OpenBMC Distribution (mirror) https://git.radix-linux.su/BMC/OpenBmc/openbmc.git/atom?h=scarthgap 2025-11-03T19:31:57+00:00 2025-11-03T19:31:57+00:00 Andrew Geissler geissonator@yahoo.com 2025-11-03T16:09:31+00:00 urn:sha1:6cb7f76381dbeb50bbf963f9192344f02d985637 poky: ca27724b44..c4a4df3e72: Adam Blank (3): kernel-dev/common.rst: fix the in-tree defconfig description ref-manual/variables.rst: fix the description of KBUILD_DEFCONFIG ref-manual/variables.rst: fix the description of STAGING_DIR Aditya Tayade (1): e2fsprogs: removed 'sed -u' option Adrian Freihofer (15): kernel-fitimage: fix intentation kernel-fitimage: fix external dtb check devtool: modify support debug-builds devtool: ide-sdk sort cmake preset devtool: ide-sdk recommend DEBUG_BUILD oe-selftest: devtool ide-sdk use modify debug-build devtool: ide-sdk remove the plugin from eSDK installer uboot-config: fix devtool modify with kernel-fitimage sdk-manual: extensible.rst: devtool ide-sdk improve sdk-manual: extensible.rst: update devtool ide-sdk ref-manual: kernel-fitimage.bbclass does not use SPL_SIGN_KEYNAME llvm: update from 18.1.6 to 18.1.8 llvm: fix build with gcc-15 expect: Revert "expect-native: fix do_compile failure with gcc-14" expect: fix native build with GCC 15 Alban Bedel (1): bind: Fix build with the `httpstats` package config enabled Aleksandar Nikolic (12): cve-check: Introduce CVE_CHECK_MANIFEST_JSON_SUFFIX install-buildtools: remove md5 checksum validation install-buildtools: fix "test installation" step install-buildtools: update base-url, release and installer version ref-manual: introduce CVE_CHECK_REPORT_PATCHED variable scripts/install-buildtools: Update to 5.0.5 scripts/install-buildtools: Update to 5.0.6 scripts/install-buildtools: Update to 5.0.7 scripts/install-buildtools: Update to 5.0.9 scripts/install-buildtools: Update to 5.0.10 scripts/install-buildtools: Update to 5.0.11 scripts/install-buildtools: Update to 5.0.12 Alessio Cascone (1): tzcode-native: Fix compiler setting from 2023d version Alexander Kanavin (29): mesa: remove obsolete 0001-meson.build-check-for-all-linux-host_os-combinations.patch kexec-tools: submit 0003-kexec-ARM-Fix-add_buffer_phys_virt-align-issue.patch upstream vorbis: mark patch as Inactive-Upstream grub: mark grub-module-explicitly-keeps-symbole-.module_license.patch as a workaround perl: submit the rest of determinism.patch upstream iptables: submit 0001-configure-Add-option-to-enable-disable-libnfnetlink.patch upstream xserver-xorg: upgrade 21.1.12 -> 21.1.13 mobile-broadband-provider-info: upgrade 20230416 -> 20240407 python3: submit deterministic_imports.patch upstream as a ticket glib-networking: submit eagain.patch upstream glslang: mark 0001-generate-glslang-pkg-config.patch as Inappropriate tcp-wrappers: mark all patches as inactive-upstream automake: mark new_rt_path_for_test-driver.patch as Inappropriate settings-daemon: submit addsoundkeys.patch upstream and update to a revision that has it dpkg: mark patches adding custom non-debian architectures as inappropriate for upstream libacpi: mark patches as inactive-upstream apr: drop 0007-explicitly-link-libapr-against-phtread-to-make-gold-.patch pulseaudio, desktop-file-utils: correct freedesktop.org -> www.freedesktop.org SRC_URI sysvinit: take release tarballs from github package_rpm: use zstd's default compression level package_rpm: restrict rpm to 4 threads rust: add reproducibility patch to eliminate host leakage rust: build the default set of tools rust: use rust-snapshot binaries only in rust-native rust: correctly link rust-snapshot into build/stage0 pkg-config-native: pick additional search paths from $EXTRA_NATIVE_PKGCONFIG_PATH selftest/rust: correctly form the PATH environment variable perlcross: update 1.5.2 -> 1.6 mtools: upgrade 4.0.43 -> 4.0.44 Alexis Cellier (1): systemd: add libpcre2 as RRECOMMENDS if pcre2 is enabled Alexis Lothoré (3): oeqa/utils/postactions: transfer whole archive over ssh instead of doing individual copies oeqa/postactions: fix exception handling oeqa/ssh: allow to retrieve raw, unformatted ouput Alon Bar-Lev (1): module.bbclass: add KBUILD_EXTRA_SYMBOLS to install Alper Ak (2): ref-manual/variables.rst: document INHIBIT_DEFAULT_RUST_DEPS ref-manual/variables.rst: document INHIBIT_UPDATERCD_BBCLASS Anders Heimer (1): libpam: mark CVE-2025-6018 as not applicable Andrew Fernandes (1): gtk+: add missing libdrm dependency Andrew Kreimer (1): manuals: remove repeated word Antonin Godard (77): ref-manual: add missing CVE_CHECK manifest variables ref-manual: add missing TESTIMAGE_FAILED_QA_ARTIFACTS ref-manual: add missing EXTERNAL_KERNEL_DEVICETREE variable ref-manual: add missing OPKGBUILDCMD variable ref-manual: merge patch-status-* to patch-status ref-manual: structure.rst: document missing tmp/ dirs overview-manual: concepts: add details on package splitting ref-manual: faq: add q&a on class appends ref-manual: release-process: update releases.svg ref-manual: release-process: refresh the current LTS releases ref-manual: release-process: update releases.svg with month after "Current" ref-manual: release-process: add a reference to the doc's release ref-manual: devtool-reference: refresh example outputs ref-manual: devtool-reference: document missing commands conf.py: rename :cve: role to :cve_nist: doc: Makefile: remove inkscape, replace by rsvg-convert doc: Makefile: add support for xelatex doc: add a download page for epub and pdf sphinx-static/switchers.js.in: do not refer to URL_ROOT anymore conf.py: add a bitbake_git extlink dev-manual: document how to provide confs from layer.conf dev-manual: bblock: use warning block instead of attention standards.md: add a section on admonitions ref-manual: classes: fix bin_package description Gather dependencies in poky.yaml.in poky.yaml.in: add missing locales dependency poky.yaml.in: replace inkscape dependency by librsvg2-bin system-requirements: add fedora 39 to supported distros system-requirements: update list of supported distros system-requirements.rst: add dependencies for pdf builds Update the documentation for SRCPV poky.conf: add new tested distros ref-manual/qa-checks: remove patch-status-core/patch-status-noncore contributor-guide/submit-changes.rst: suggest to remove the git signature ref-manual/devtool-reference: add warning note on deploy-target and shared objects SSTATE_MIRRORS/SOURCE_MIRROR_URL: add instructions for mirror authentication ref-manual/packages: move ptest section to the test-manual ref-manual: move runtime-testing section to the test-manual Update autobuilder URLs to valkyrie test-manual/reproducible-builds: fix reproducible links test-manual/ptest: link to common framework ptest classes dev-manual/building: document the initramfs-framework recipe ref-manual/faq: add q&a on systemd as default contributor-guide/submit-changes: add policy on AI generated code Add favicon for the documentation html overview-manual/concepts: remove PR from the build dir list ref-manual/variables.rst: WATCHDOG_TIMEOUT: fix recipe name ref-manual/variables.rst: document autotools class related variables documentation/conf.py: define a manpage url ref-manual/variables.rst: add manpage links for toolchain variables ref-manual/variables.rst: add missing documentation for BUILD_* variables ref-manual/variables.rst: document missing SDK_*_ARCH variables ref-manual/variables.rst: document HOST_*_ARCH variables ref-manual/variables.rst: HOST_CC_ARCH: fix wrong SDK reference ref-manual/variables.rst: improve the PKGV documentation poky.yaml: introduce DISTRO_LATEST_TAG Fix dead links that use the DISTRO macro dev-manual/sbom.rst: fix wrong build outputs test-manual/intro: remove Buildbot version used ref-manual/release-process: update releases.svg overview-manual/concepts.rst: fix sayhello hardcoded bindir ref-manual/system-requirements.rst: update supported distributions ref-manual/variables.rst: document the FIT_CONF_PREFIX variable ref-manual/variables.rst: document SPL_DTB_BINARY ref-manual/classes.rst: document the testexport class dev-manual/security-subjects.rst: update mailing lists test-manual/yocto-project-compatible.rst: fix a typo ref-manual/structure: document the auto.conf file ref-manual/variables.rst: document UNINATIVE_URL/CHECKSUM ref-manual/classes.rst: extend the uninative class documentation ref-manual/classes,variables: document the CCACHE_DISABLE variable ref-manual/variables.rst: document the REQUIRED_MACHINE_FEATURES variable ref-manual/variables.rst: document the REQUIRED_COMBINED_FEATURES variable ref-manual/variables.rst: document the REQUIRED_IMAGE_FEATURES variable ref-manual/variables.rst: document the USE_NLS variable ref-manual/classes.rst: gettext: extend the documentation of the class ref-manual/classes.rst: document the relative_symlinks class Anuj Mittal (1): sqlite3: upgrade 3.45.1 -> 3.45.3 Archana Polampalli (51): less: fix CVE-2024-32487 ofono: fix CVE-2023-2794 ffmpeg: fix CVE-2023-49502 ffmpeg: fix CVE-2024-31578 ffmpeg: fix CVE-2024-31582 ffmpeg: fix CVE-2023-50008 ffmpeg: fix CVE-2024-32230 qemu: fix CVE-2024-7409 ffmpeg: fix CVE-2023-49501 ffmpeg: fix CVE-2024-28661 ffmpeg: fix CVE-2023-50007 ffmpeg: fix CVE-2023-49528 ffmpeg: fix CVE-2024-7055 ffmpeg: fix CVE-2024-35366 ffmpeg: fix CVE-2024-35367 ffmpeg: fix CVE-2024-35368 rsync: fix CVE-2024-12084 rsync: fix CVE-2024-12085 rsync: fix CVE-2024-12086 rsync: fix CVE-2024-12087 rsync: fix CVE-2024-12088 rsync: fix CVE-2024-12747 ffmpeg: fix CVE-2024-35365 ffmpeg: fix CVE-2024-36613 ffmpeg: fix CVE-2024-36616 ffmpeg: fix CVE-2024-36617 ffmpeg: fix CVE-2024-36618 ffmpeg: fix CVE-2024-36619 ffmpeg: fix CVE-2024-35369 gstreamer1.0-rtsp-server: fix CVE-2024-44331 ffmpeg: fix CVE-2025-25473 ffmpeg: fix CVE-2025-25471 ffmpeg: fix CVE-2025-22921 ffmpeg: fix CVE-2025-0518 ffmpeg: Correct the CVE ID to fix CVE-2025-22919 openssh: fix CVE-2025-26465 go: fix CVE-2025-22870 ghostscript: upgrade 10.04.0 -> 10.05.0 perlcross: 1.6 -> 1.6.2 perl: upgrade 5.38.2 -> 5.38.4 xwayland: fix CVE-2025-49175 xwayland: fix CVE-2025-49176 xwayland: fix CVE-2025-49177 xwayland: fix CVE-2025-49178 xwayland: fix CVE-2025-49179 xwayland: fix CVE-2025-49180 gdk-pixbuf: fix CVE-2025-7345 go: fix CVE-2025-4674 ffmpeg: upgrade 6.1.2 -> 6.1.3 ffmpeg: fix CVE-2025-1594 go: fix CVE-2025-47906 Ashish Sharma (11): bind: Upgrade 9.18.25 -> 9.18.28 ruby: Backport fix for CVE-2024-27282 ruby: Fix CVE-2025-27219 binutils: Fix CVE-2025-1176 binutils: patch CVE-2025-1178 & CVE-2024-57360 binutils: patch CVE-2025-1181 binutils: patch CVE-2025-1182 libsoup: patch CVE-2025-46420 libsoup-2.4: Fix CVE-2025-46420 libsoup: patch CVE-2025-4476 screen: patch CVE-2025-46805 AshishKumar Mishra (2): systemd: backport fix for handle USE_NLS from master p11-kit: backport fix for handle USE_NLS from master Barne Carstensen (1): test-manual: update runtime-testing Exporting Tests section Bartosz Golaszewski (1): linux-firmware: add a package for ath12k firmware Benjamin Szőke (2): archiver.bbclass: Fix work-shared checking for kernel recipes mc: fix source URL Bin Lan (1): lttng-ust: backport patch to fix cmake-multiple-shared-libraries build error Bruce Ashfield (54): linux-yocto/6.6: update to v6.6.36 linux-yocto/6.6: update to v6.6.38 linux-yocto/6.6: update to v6.6.40 linux-yocto/6.6: update to v6.6.43 kernel-devsrc: remove 64 bit vdso cmd files linux-yocto/6.6: update to v6.6.44 linux-yocto/6.6: update to v6.6.45 linux-yocto/6.6: fix genericarm64 config warning linux-yocto/6.6: update to v6.6.47 linux-yocto/6.6: update to v6.6.49 linux-yocto/6.6: update to v6.6.50 linux-yocto/6.6: update to v6.6.52 linux-yocto/6.6: update to v6.6.54 linux-yocto/6.6: update to v6.6.56 linux-yocto/6.6: update to v6.6.58 linux-yocto/6.6: genericarm64.cfg: enable CONFIG_DMA_CMA linux-yocto/6.6: update to v6.6.59 linux-yocto/6.6: update to v6.6.60 linux-yocto/6.6: update to v6.6.62 linux-yocto/6.6: bsp/genericarm64: disable ARM64_SME linux-yocto/6.6: update to v6.6.63 linux-yocto/6.6: update to v6.6.64 linux-yocto/6.6: update to v6.6.66 linux-yocto/6.6: update to v6.6.69 linux-yocto/6.6: update to v6.6.75 linux-yocto/6.6: update to v6.6.77 linux-yocto/6.6: update to v6.6.78 linux-yocto/6.6: update to v6.6.80 linux-yocto/6.6: update to v6.6.82 linux-yocto/6.6: update to v6.6.83 linux-yocto/6.6: update to v6.6.84 linux-yocto/6.6: update to v6.6.85 linux-yocto/6.6: fix beaglebone ethernet linux-yocto/6.6: update to v6.6.86 linux-yocto/6.6: update to v6.6.87 linux-yocto/6.6: update to v6.6.88 linux-yocto/6.6: update to v6.6.89 linux-yocto/6.6: update to v6.6.91 linux-yocto/6.6: update to v6.6.92 linux-yocto/6.6: update to v6.6.93 linux-yocto/6.6: update to v6.6.94 linux-yocto/6.6: update to v6.6.96 linux-yocto/6.6: update to v6.6.98 linux-yocto/6.6: update to v6.6.99 linux-yocto/6.6: update to v6.6.100 linux-yocto/6.6: update to v6.6.101 linux-yocto/6.6: update to v6.6.102 linux-yocto/6.6: update to v6.6.103 linux-yocto/6.6: update to v6.6.106 linux-yocto/6.6: update to v6.6.107 linux-yocto/6.6: update to v6.6.108 linux-yocto/6.6: update to v6.6.109 linux-yocto/6.6: update to v6.6.110 linux-yocto/6.6: update to v6.6.111 Carlos Alberto Lopez Perez (1): icu: Backport patch to fix build issues with long paths (>512 chars) Carlos Sánchez de La Lama (1): ref-manual: clarify KCONFIG_MODE default behaviour Catalin Popescu (1): Revert "bluez5: remove configuration files from install task" Changqing Li (48): apt-native: don't let dpkg overwrite files by default apt: runtime error: filename too long (tmpdir length) webkitgtk: fix do_configure error on beaglebone-yocto webkitgtk: fix do_compile errors on beaglebone-yocto vulkan-samples: fix do_compile error when -Og enabled multilib.conf: remove appending to PKG_CONFIG_PATH gettext: fix a parallel build issue pixman: fixing inline failure with -Og rt-tests: rt_bmark.py: fix TypeError curl: correct the PACKAGECONFIG for native/nativesdk libpng: update SRC_URI expect-native: fix do_compile failure with gcc-14 libcap-ng: update SRC_URI sysvinit: backport patch for fixing one issue of pidof acpica: fix CVE-2024-24856 libsoup: fix CVE-2024-52530, CVE-2024-52531 rxvt-unicode.inc: disable the terminfo installation by setting TIC to : sanity.bbclass: skip check_userns for non-local uid systemd: enable create-log-dirs babeltrace: extend to nativesdk babeltrace2: extend to nativesdk patch.py: set commituser and commitemail for addNote initscripts: add function log_success_msg/log_failure_msg/log_warning_msg buildtools-tarball: move setting of envvars to respective envfile buildtools-tarball: add envvars into BB_ENV_PASSTHROUGH_ADDITIONS buildtools-tarball: Make buildtools respects host CA certificates libsoup: fix CVE-2025-32908 libsoup: fix CVE-2025-32907 libsoup-2.4: fix CVE-2025-32907 libsoup-2.4: fix do_compile failure libsoup-2.4: fix CVE-2025-32053 libsoup: fix CVE-2025-32053 libsoup-2.4: fix CVE-2025-32052 libsoup: fix CVE-2025-32052 libsoup: fix CVE-2025-32051 libsoup-2.4: fix CVE-2025-32050 libsoup: fix CVE-2025-32050 libsoup-2.4: fix CVE-2025-46421 libsoup: fix CVE-2025-46421 libsoup-2.4: fix CVE-2025-4948 libsoup: fix CVE-2025-4948 libsoup-2.4: fix CVE-2025-4476 libsoup-2.4: fix CVE-2025-2784 libsoup: fix CVE-2025-2784 icu: fix CVE-2025-5222 libsoup-2.4: refresh CVE-2025-4969.patch libsoup-2.4: fix CVE-2025-4945 libsoup: fix CVE-2025-4945 Chen Qi (8): libnl: change HOMEPAGE qemu: back port patches to fix riscv64 build failure toolchain-shar-extract.sh: exit when post-relocate-setup.sh fails libgfortran: fix buildpath QA issue bitbake: data_smart.py: remove unnecessary ? from __expand_var_regexp__ bitbake: data_smart.py: simple clean up bitbake: data_smart.py: clear expand_cache in _setvar_update_overridevars coreutils: fix CVE-2025-5278 Chris Laplante (6): bitbake: persist_data: close connection in SQLTable __exit__ bitbake: fetch2: use persist_data context managers bitbake: ui/knotty: print log paths for failed tasks in summary bitbake: ui/knotty: respect NO_COLOR & check for tty; rename print_hyperlink => format_hyperlink bitbake: cooker: Make cooker 'skiplist' per-multiconfig/mc util-linux: use ${B} instead of ${WORKDIR}/build, to fix building under devtool Christian Taedcke (1): iptables: fix memory corruption when parsing nft rules Christos Gavros (2): ref-manual/variables.rst: document the IMAGE_ROOTFS_MAXSIZE variable ref-manual/variables.rst: document the INITRAMFS_MAXSIZE variable Claus Stovgaard (1): lib/oe/package-manager: skip processing installed-pkgs with empty globs Clayton Casciato (1): uboot-sign: fix concat_dtb arguments Colin McAllister (2): udev-extraconf: Add collect flag to mount busybox: Fix cut with "-s" flag Colin Pinnell McAllister (1): ffmpeg: fix CVE-2025-1373 Daniel Semkowicz (2): os-release: Fix VERSION_CODENAME in case it is empty gstreamer1.0-plugins-bad: fix buffer allocation fail for v4l2codecs Daniel Turull (4): package: export debugsources in PKGDESTWORK as json spdx: add option to include only compiled sources xz: ignore CVE-2024-47611 libxml2: ignore CVE-2025-8732 David Nyström (3): openssh: fix CVE-2025-61985 openssh: fix CVE-2025-61984 lz4: fix CVE-2025-62813 Deepak Rathore (1): default-distrovars.inc: Fix CONNECTIVITY_CHECK_URIS redirect issue Deepesh Varatharajan (13): binutils: stable 2.42 branch updates glibc: stable 2.39 branch updates. binutils: stable 2.42 branch update binutils: Fix CVE-2025-0840 glibc: stable 2.39 branch updates binutils: stable 2.42 branch updates binutils: Fix CVE-2025-5245 binutils: Fix CVE-2025-5244 gcc: Upgrade to GCC 13.4 binutils: stable 2.42 branch updates binutils: Fix CVE-2025-7545 glibc: stable 2.39 branch updates glibc: stable 2.39 branch updates Deepthi Hemraj (5): binutils: stable 2.42 branch updates glibc: stable 2.39 branch updates rust-llvm: Fix CVE-2024-0151 binutils: stable 2.42 branch update glibc: stable 2.39 branch updates Denys Dmytriyenko (3): weston: upgrade 13.0.0 -> 13.0.1 gcc: unify cleanup of include-fixed, apply to cross-canadian nativesdk-libtool: sanitize the script, remove buildpaths Divya Chellam (16): libpam: fix CVE-2024-10041 libxml2: Upgrade 2.12.8 -> 2.12.9 wget: fix CVE-2024-10524 vim: Upgrade 9.1.0764 -> 9.1.1043 vim: Upgrade 9.1.1043 -> 9.1.1115 ruby: fix CVE-2025-27220 ruby: fix CVE-2025-27221 screen: fix CVE-2025-46802 screen: fix CVE-2025-46804 libarchive: fix CVE-2025-5914 libarchive: fix CVE-2025-5915 libarchive: fix CVE-2025-5916 libarchive: fix CVE-2025-5917 libarchive: fix CVE-2025-5918 wpa-supplicant: fix CVE-2022-37660 vim: upgrade 9.1.1652 -> 9.1.1683 Divyanshu Rathore (1): ffmpeg: upgrade 6.1.1 -> 6.1.2 Dixit Parmar (1): ref-manual: document KERNEL_SPLIT_MODULES variable Dmitry Baryshkov (1): xserver-xorg: fix CVE-2023-5574 status Emil Kronborg (3): insane.bbclass: remove skipping of cross-compiled packages insane.bbclass: fix HOST_ variable names insane.bbclass: remove leftover variables and comment Enrico Jörns (6): wic: engine.py: use raw string for escape sequence wic: bootimg-efi: fix error handling bitbake: bitbake-diffsigs: fix handling when finding only a single sigfile ref-manual/variables.rst: update ROOT_HOME documentation conf.py: tweak SearchEnglish to be hyphen-friendly conf.py: improve SearchEnglish to handle terms with dots Erik Lindsten (1): overview-manual/yp-intro.rst: fix broken link to article Esben Haabendal (3): pulseaudio: fix webrtc audio depdency files: Amend overlayfs unit descriptions with path information files: overlayfs-create-dirs: Improve mount unit dependency Etienne Cordonnier (6): oeqa/runtime: fix regression in minidebuginfo test oeqa/runtime: make minidebuginfo test work with coreutils oeqa/runtime: fix race-condition in minidebuginfo test python3-setuptools-scm: respect GIT_CEILING_DIRECTORIES ref-manual/variables.rst: document SSTATE_SKIP_CREATION bitbake: gcp.py: remove slow calls to gsutil stat Fabio Berton (2): ccache.conf: Add include_file_ctime to sloppiness linux-libc-headers: Fix invalid conversion in cn_proc.h Florian Kreutzer (1): dropbear: backport fix for concurrent channel open/close Gassner, Tobias.ext (1): rootfs: Ensure run-postinsts is not uninstalled for read-only-rootfs-delayed-postinsts Gauthier HADERER (1): populate_sdk_ext.bclass: make sure OECORE_NATIVE_SYSROOT is exported. Guocai He (2): tcf-agent: correct the SRC_URI minicom: correct the SRC_URI Guénaël Muller (1): ref-manual: use standardized method accross both ubuntu and debian for locale install Guðni Már Gilbert (15): pam: Fix for CVE-2024-22365 python3-attrs: drop python3-ctypes from RDEPENDS bluez5: remove redundant patch for MAX_INPUT shared-mime-info: drop itstool-native from DEPENDS libpam: drop cracklib from DEPENDS systemd: drop intltool-native from DEPENDS systemd-boot: drop intltool-native from DEPENDS python3-poetry-core: drop python3-six from RDEPENDS dnf: drop python3-iniparse from DEPENDS and RDEPENDS python3: upgrade 3.12.6 -> 3.12.7 python3: upgrade 3.12.7 -> 3.12.8 systemd: upgrade 255.13 -> 255.17 systemd: upgrade 255.17 -> 255.18 bluez5: add missing tools to noinst-tools package systemd: upgrade 255.18 -> 255.21 Gyorgy Sarvari (1): conf/bitbake.conf: use gnu mirror instead of main server Haixiao Yan (2): glibc: Add single-threaded fast path to rand() buildtools-tarball: fix unbound variable issues under 'set -u' Harish Sadineni (7): binutils: Add missing perl modules to RDEPENDS for nativesdk variant rust-target-config: Fix TARGET_C_INT_WIDTH with correct size rust: fix for rust multilib sdk configuration rust: remove redundant cargo config file oeqa/sdk/context: fix for gtk3 test failure during do_testsdk binutils: Fix CVE-2025-1179 binutils: set CVE_STATUS for CVE-2025-1180 Hiago De Franco (2): weston: backport patch to allow neatvnc < v0.9.0 bluez5: backport patch to fix address type when loading keys Hitendra Prajapati (24): ghostscript: upgrade 10.02.1 -> 10.03.1 ruby: fix CVE-2024-27281 vte: fix CVE-2024-37535 curl: fix CVE-2024-8096 webkitgtk: upgrade 2.44.1 -> 2.44.3 cups: Backport fix for CVE-2024-47175 libarchive: fix CVE-2024-48957 & CVE-2024-48958 libsoup: fix CVE-2024-52532 ghostscript: upgrade 10.03.1 -> 10.04.0 libsndfile: fix CVE-2024-50612 ofono: Fix multiple CVEs libcap: fix CVE-2025-1390 elfutils: Fix multiple CVEs go: fix CVE-2025-22871 libsoup-3.4.4: Fix CVE-2025-4969 libsoup-2.4: Fix CVE-2025-4969 libxml2: fix CVE-2025-6021 libxml2: fix CVE-2025-49794 & CVE-2025-49796 libpam: fix CVE-2025-6020 gstreamer1.0-plugins-base: fix CVE-2025-47808 gstreamer1.0-plugins-base: fix CVE-2025-47806 gstreamer1.0-plugins-good: fix multiple CVEs gstreamer1.0-plugins-base: fix CVE-2025-47807 grub2: mark CVE-2024-2312 as not applicable Hongxu Jia (10): ovmf: fix CVE-2024-38796 ovmf: fix CVE-2024-1298 u-boot: fix CVE-2024-57254 u-boot: fix CVE-2024-57255 u-boot: fix CVE-2024-57256 u-boot: fix CVE-2024-57257 u-boot: fix CVE-2024-57258 u-boot: fix CVE-2024-57259 rpm: keep leading `/' from sed operation u-boot: fix CVE-2024-42040 Igor Opaniuk (1): wic: bootimg-efi: Support + symbol in filenames Jaeyoon Jung (2): makedevs: Fix issue when rootdir of / is given makedevs: Fix matching uid/gid Jagadeesh Krishnanjanappa (1): tune-cortexa32: set tune feature as armv8a Jan Vermaete (1): sdk: The main in the C example should return an int Jeroen Hofstee (2): bluez5: make media control a PACKAGECONFIG option bluez5: backport a patch to fix btmgmt -i Jiaying Song (9): liba52: fix do_fetch error enchant2: fix do_fetch error libxml-parser-perl: fix do_fetch error python3-zipp: fix CVE-2024-5569 subversion: fix CVE-2024-46901 boost: fix do_fetch error binutils: File name too long causing failure to open temporary head file in dlltool python3-requests: upgrade 2.32.3 -> 2.32.4 ruby-ptest : some ptest fixes Jinfeng Wang (3): tzdata&tzcode-native: upgrade 2024a -> 2024b mtools: upgrade 4.0.48 -> 4.0.49 systemtap: Fix task_work_cancel build Joao Marcos Costa (1): ref-manual/variables.rst: expand IMAGE_OVERHEAD_FACTOR glossary entry Joe Slater (1): oe-debuginfod: add option for data storage Joerg Schmidt (1): bitbake: bblayers/query: Fix using "removeprefix" string method Johannes Schneider (1): ppp: Revert lock path to /var/lock Jon Mason (4): oeqa/runtime/ssh: add retry logic and sleeps to allow for slower systems oeqa/runtime/ssh: check for all errors at the end oeqa/runtime/ssh: increase the number of attempts openssh: add backported header file include Jonas Gorski (1): rootfs-postcommands.bbclass: make opkg status reproducible Jookia (1): populate_sdk_ext.bbclass: Fix undefined variable error Jose Quaresma (7): go: upgrade 1.22.4 -> 1.22.5 oeqa/runtime/scp: requires openssh-sftp-server openssh: drop rejected patch fixed in 8.6p1 release openssh: systemd sd-notify patch was rejected upstream openssh: systemd notification was implemented upstream go: upgrade 1.22.5 -> 1.22.6 bitbake: bitbake: doc/user-manual: Update the BB_HASHSERVE_UPSTREAM Joshua Watt (3): bitbake: asyncrpc: Use client timeout for websocket open timeout bitbake: Remove custom exception backtrace formatting bitbake: Use a "fork" multiprocessing context João Marcos Costa (1): variables.rst: fix LAYERDEPENDS description Julien Stephan (5): README: add instruction to run Vale on a subset documentation: Makefile: add SPHINXLINTDOCS to specify subset to sphinx-lint styles: vocabularies: Yocto: add sstate ref-manual: variables: add SIGGEN_LOCKEDSIGS* variables dev-manual: add bblock documentation Jörg Sommer (5): classes/kernel: No symlink in postinst without KERNEL_IMAGETYPE_SYMLINK doc/features: remove duplicate word in distribution feature ext2 doc/features: describe distribution feature pni-name ptest-runner: Update 2.4.4 -> 2.4.5 runqemu: Fix detection of -serial parameter Kai Kang (3): multilib.bbclass: replace deprecated e.data with d cmake-qemu.bbclass: fix if criterion glibc: fix fortran header file conflict for arm Khem Raj (26): linux-yocto: Enable team net driver systemd.bbclass: Clarify error message grub,grub-efi: Remove -mfpmath=sse on x86 python3: Treat UID/GID overflow as failure gawk: Remove References to /usr/local/bin/gawk busybox: CVE-2023-42364 and CVE-2023-42365 fixes busybox: Add fix for CVE-2023-42366 gcc: Fix spurious '/' in GLIBC_DYNAMIC_LINKER on microblaze gnupg: Document CVE-2022-3219 and mark wontfix openssh: Mark CVE-2023-51767 as wont-fix libpcre2: Update base uri PhilipHazel -> PCRE2Project python3: Drop empty patch qemu: Do not define sched_attr with glibc >= 2.41 e2fsprogs: Fix build failure with gcc 15 parted: Fix build with GCC 15 bash: Stick to C17 std ncurses: Pin to C17 standard unzip: Fix build with GCC-15 m4: Stick to C17 standard gmp: Fix build with GCC15/C23 gmp: Fix build with older gcc versions gdbm: Use C11 standard unifdef: Don't use C23 constexpr keyword libtirpc: Fix build with gcc-15/C23 cpio: Pin to use C17 std expect: Fix build with GCC 15 Kirill Yatsenko (1): iptables: fix save/restore symlinks with libnftnl PACKAGECONFIG enabled Konrad Weihmann (3): runqemu: keep generating tap devices testimage: fallback for empty IMAGE_LINK_NAME testexport: fallback for empty IMAGE_LINK_NAME Kyungjik Min (1): pulseaudio: Add audio group explicitly Lee Chee Yang (24): migration-notes: add release notes for 5.0.1 migration-guides: add release notes for 4.0.19 migration-guides: add release notes for 5.0.2 migration-guide: add release notes for 4.0.20 migration-guides: add release notes for 5.0.3 migration-guide: add release notes for 4.0.21 migration-guides: add release notes for 5.0.4 migration-guide: add release notes for 4.0.22 migration-guides: add release notes for 5.0.5 migration-guides: add release notes for 4.0.23 migration-guides: add release notes for 5.0.6 migration-guides: add release notes for 4.0.24 migration-guides: add release notes for 5.0.7 migration-guides: add release notes for 4.0.25 migration-guides: add release notes for 5.0.8 migration-guides: add release notes for 4.0.26 migration-guides: add release notes for 5.0.9 migration-guides: add release notes for 4.0.27 migration-guide: add release notes for 5.0.10 migration-guides: add release notes for 4.0.28 migration-guides: add release notes for 5.0.11 migration-guides: add release notes for 4.0.29 migration-guides: add release notes for 5.0.12 migration-guides: add release notes for 4.0.30 Libo Chen (1): runqemu: fix special characters bug Louis Rannou (1): image_qa: fix error handling Macpaul Lin (1): linux-firmware: upgrade 20240312 -> 20240909 Madhu Marri (1): qemu 8.2.7: ignore CVE-2023-1386 Makarios Christakis (1): icu: Adjust ICU_DATA_DIR path on big endian targets Marco Cavallini (1): dev-manual/start.rst: added missing command in Optimize your VHDX file using DiskPart Marek Vasut (3): u-boot: kernel-fitimage: Fix dependency loop if UBOOT_SIGN_ENABLE and UBOOT_ENV enabled base-files: Drop /bin/sh dependency u-boot: kernel-fitimage: Restore FIT_SIGN_INDIVIDUAL="1" behavior Mark Hatle (9): package.py: Fix static debuginfo split package.py: Fix static library processing selftest-hardlink: Add additional test cases create-spdx-*: Support multilibs via SPDX_MULTILIB_SSTATE_ARCHS oeqa sdk cases: Skip SDK test cases when TCLIBC is newlib create-sdpx-2.2.bbclass: Switch from exists to isfile checking debugsrc populate_sdk_ext: write_local_conf add shutil import cve-update-nvd2-native: Handle BB_NO_NETWORK and missing db bitbake: bitbake: runqueue: Verify mcdepends are valid Markus Volk (3): libadwaita: update 1.5.0 -> 1.5.1 gcc: add a backport patch to fix an issue with tzdata 2024b ninja: fix build with python 3.13 Marta Rybczynska (1): vulnerabilities/classes: remove references to cve-check text format Martin Jansa (22): selftest: add Upstream-Status to .patch files libgfortran.inc: fix nativesdk-libgfortran dependencies populate_sdk_base: inherit nopackages meta-world-pkgdata: Inherit nopackages python3-lxml=v5.0.2 mc: set ac_cv_path_ZIP to avoid buildpaths QA issues libpam: re-add missing libgen include cairo: fix build with gcc-15 on host bash: use -std=gnu17 also for native CFLAGS cmake: fix build with gcc-15 on host git: fix build with gcc-15 on host pkgconfig: fix build with gcc-15 libgpg-error: fix build with gcc-15 rust-llvm: fix build with gcc-15 elfutils: fix build with gcc-15 binutils: fix build with gcc-15 dbus-glib: fix build with gcc-15 bitbake: bitbake: Bump version to 2.8.1 license.py: avoid deprecated ast.Str sanity.conf: Update minimum bitbake version to 2.8.1 lib/oe/utils: use multiprocessing from bb flex: fix build with gcc-15 on host Matthias Pritschet (1): ref-manual: fix typo and move SYSROOT_DIRS example Matthias Schiffer (1): curl: only set CA bundle in target build Michael Haener (1): oeqa/runtime/ping: don't bother trying to ping localhost Michael Halstead (4): yocto-uninative: Update to 4.6 for glibc 2.40 yocto-uninative: Update to 4.7 for glibc 2.41 yocto-uninative: Update to 4.8 for GCC 15.1 yocto-uninative: Update to 4.9 for glibc 2.42 Michael Opdenacker (5): maintainers.inc: update self e-mail address doc: Makefile: publish pdf and epub versions too dev-manual: fix styling of references to bmaptool dev-manual/bmaptool.rst: correct command for bmaptool-native dev-manual/bmaptool.rst: simplify and fix instructions Michal Seben (1): timedated: wait for jobs before SetNTP response Mikko Rapeli (1): ovmf-native: remove .pyc files from install Mingli Yu (1): llvm: Enable libllvm for native build Moritz Haase (2): meta: Enable '-o pipefail' for the SDK installer cmake: Correctly handle cost data of tests with arbitrary chars in name NeilBrown (1): nfs-utils: don't use signals to shut down nfs server. Nguyen Dat Tho (1): libatomic-ops: Update GITHUB_BASE_URI Nikhil R (1): cmake: Add PACKAGECONFIG option for debugger support Niko Mauno (15): dnf/mesa: Fix missing leading whitespace with ':append' libyaml: Fix warning regarding unpatched CVE systemd: Mitigate /var/log type mismatch issue systemd: Mitigate /var/tmp type mismatch issue image_types.bbclass: Use --force also with lz4,lzop util-linux: Add PACKAGECONFIG option to mitigate rootfs remount error iw: Fix LICENSE dejagnu: Fix LICENSE unzip: Fix LICENSE zip: Fix LICENSE tiff: Fix LICENSE gcr: Fix LICENSE python3-maturin: Fix cross compilation issue for armv7l, mips64, ppc cve-check.bbclass: Mitigate symlink related error cve-check.bbclass: Fix symlink handling also for text files Nitin Wankhade (1): examples: genl: fix wrong attribute size Oleksandr Hnatiuk (2): icu: remove host references in nativesdk to fix reproducibility gcc: remove paths to sysroot from configargs.h and checksum-options for gcc-cross-canadian Patrick Wicki (1): gpgme: move gpgme-tool to own sub-package Paul Barker (2): meta-ide-support: Mark recipe as MACHINE-specific dev-manual, test-manual: Update autobuilder output links Paul Gerber (1): uboot-sign: fix counters in do_uboot_assemble_fitimage Pavel Zhukov (1): package_rpm: Check if file exists before open() Pedro Ferreira (3): buildhistory: Fix intermittent package file list creation buildhistory: Restoring files from preserve list rust-common.bbclass: soft assignment for RUSTLIB path Peter Kjellerstedt (1): image.bbclass: Drop support for ImageQAFailed exceptions in image_qa Peter Marko (144): flac: fix buildpaths warnings cargo: remove True option to getVar calls ncurses: switch to new mirror busybox: Patch CVE-2021-42380 busybox: Patch CVE-2023-42363 libstd-rs,rust-cross-canadian: set CVE_PRODUCT to rust curl: Patch CVE-2024-6197 glibc: cleanup old cve status qemu: set cve status for CVE-2023-6683 libmnl: explicitly disable doxygen libyaml: ignore CVE-2024-35326 libyaml: Ignore CVE-2024-35325 curl: Patch CVE-2024-7264 python3: Upgrade 3.12.5 -> 3.12.6 wpa-supplicant: Ignore CVE-2024-5290 wpa-supplicant: Patch CVE-2024-3596 wpa-supplicant: Patch security advisory 2024-2 rust: ignore CVE-2024-43402 openssl: patch CVE-2024-9143 cve-check: add support for cvss v4.0 go: upgrade 1.22.6 -> 1.22.7 go: upgrade 1.22.7 -> 1.22.8 dropbear: backport patch for CVE-2023-48795 curl: patch CVE-2024-9681 gstreamer1.0: set status for CVE-2024-0444 expat: upgrade 2.6.3 -> 2.6.4 builder: set CVE_PRODUCT qemu: set CVE-2024-6505 to fixed gstreamer1.0-plugins-good: fix several CVEs gstreamer1.0-plugins-base: patch CVE-2024-47538 gstreamer1.0-plugins-base: patch CVE-2024-47607 gstreamer1.0-plugins-base: patch CVE-2024-47615 gstreamer1.0-plugins-good: patch CVE-2024-47613 gstreamer1.0-plugins-good: patch several CVEs gstreamer1.0-plugins-base: patch CVE-2024-47541 gstreamer1.0-plugins-base: patch CVE-2024-47542 gstreamer1.0-plugins-good: patch CVE-2024-47599 gstreamer1.0-plugins-base: patch CVE-2024-47600 gstreamer1.0-plugins-good: patch CVE-2024-47606 gstreamer1.0-plugins-good: patch CVE-2024-47606 gstreamer1.0-plugins-good: patch CVE-2024-47774 gstreamer1.0-plugins-good: patch several CVEs gstreamer1.0-plugins-base: patch CVE-2024-47835 gstreamer1.0: ignore CVEs fixed in plugins recipes socat: patch CVE-2024-54661 ofono: patch CVE-2024-7540, CVE-2024-7541, CVE-2024-7542 ofono: patch CVE-2023-4232 ofono: patch CVE-2023-4235 openssl: patch CVE-2024-13176 go: upgrade 1.22.8 -> 1.22.9 go: upgrade 1.22.9 -> 1.22.10 go: upgrade 1.22.10 -> 1.22.11 glibc: stable 2.39 branch updates python3: upgrade 3.12.8 -> 3.12.9 go: upgrade 1.22.11 -> 1.22.12 cmake: apply parallel build settings to ptest tasks subversion: ignore CVE-2024-45720 gnutls: patch CVE-2024-12243 openssl: upgrade 3.2.3 -> 3.2.4 libxml2: upgrade 2.12.9 -> 2.12.10 grub: drop obsolete CVE statuses grub: backport strlcpy function grup: patch CVE-2024-45781 grub: patch CVE-2024-45782 and CVE-2024-56737 grub: patch CVE-2024-45780 grub: patch CVE-2024-45783 grub: patch CVE-2025-0624 grub: patch CVE-2024-45774 grub: patch CVE-2024-45775 grub: patch CVE-2025-0622 grub: patch CVE-2024-45776 grub: patch CVE-2024-45777 grub: patch CVE-2025-0690 grub: patch CVE-2025-1118 grub: patch CVE-2024-45778 and CVE-2024-45779 grub: patch CVE-2025-0677, CVE-2025-0684, CVE-2025-0685, CVE-2025-0686 and CVE-2025-0689 grub: patch CVE-2025-0678 and CVE-2025-1125 libarchive: patch CVE-2025-1632 and CVE-2025-25724 xserver-xorg: mark CVEs fixed in 21.1.16 as fixed cve-update-nvd2-native: handle missing vulnStatus expat: patch CVE-2024-8176 freetype: follow-up patch for CVE-2025-27363 ofono: patch CVE-2024-7537 cve-update-nvd2-native: add workaround for json5 style list xz: upgrade 5.4.6 -> 5.4.7 xz: patch CVE-2025-31115 libarchive: upgrade 3.7.4 -> 3.7.9 sqlite3: patch CVE-2025-3277 sqlite3: patch CVE-2025-29088 ppp: patch CVE-2024-58250 libxml2: patch CVE-2025-32414 libxml2: patch CVE-2025-32415 glib-2.0: patch CVE-2025-3360 Revert "cve-update-nvd2-native: Tweak to work better with NFS DL_DIR" sqlite3: mark CVE-2025-29087 as patched python3: upgrade 3.12.9 -> 3.12.11 testimage: get real os-release file net-tools: patch CVE-2025-46836 go: set status of CVE-2024-3566 glibc: stable 2.39 branch updates python3: update CVE product busybox: apply patch for CVE-2023-39810 iputils: patch CVE-2025-48964 orc: set CVE_PRODUCT openssl: CVE-2024-41996 openssl: patch CVE-2025-27587 gnutls: patch CVE-2025-32989 gnutls: patch read buffer overrun in the "pre_shared_key" extension gnutls: patch reject zero-length version in certificate request gnutls: patch CVE-2025-32988 gnutls: patch CVE-2025-32990 gnutls: patch CVE-2025-6395 ncurses: patch CVE-2025-6141 libxml2: patch CVE-2025-6170 glibc: fix CVE-2025-8058 python3: patch CVE-2025-8194 go: ignore CVE-2025-0913 dropbear: patch CVE-2025-47203 glib-2.0: ignore CVE-2025-4056 qemu: set status of CVE-2024-7730 to fixed go-binary-native: ignore CVE-2025-0913 glib-2.0: patch CVE-2025-7039 glib-2.0: patch CVE-2025-6052 dpkg: patch CVE-2025-6297 libarchive: patch regression of patch for CVE-2025-5918 vim: upgrade 9.1.1198 -> 9.1.1652 sudo: remove devtool FIXME comment busybox: patch CVE-2025-46394 gstreamer1.0: ignore CVEs fixed in plugins gstreamer1.0: ignore CVE-2025-2759 ghostscript: patch CVE-2025-59798 ghostscript: patch CVE-2025-59799 ghostscript: patch CVE-2025-59800 expat: follow-up for CVE-2024-8176 tiff: ignore 5 CVEs ffmpeg: ignore 8 CVEs fixed in 6.1.1 and 6.1.3 releases openssl: upgrade 3.2.4 -> 3.2.6 qemu: patch CVE-2024-8354 binutils: patch CVE-2025-11082 binutils: patch CVE-2025-11083 gnupg: mark CVE-2025-30258 as patched python3: upgrade 3.12.11 -> 3.12.12 vulnerabilities: update nvdcve file name expat: patch CVE-2025-59375 Philip Lorenz (3): cmake: Fix sporadic issues when determining compiler internals cve-check: Add missing call to exit_if_errors shared-mime-info: Handle USE_NLS Poonam Jadhav (2): curl: ignore CVE-2025-0725 libpng: Add ptest Praveen Kumar (7): connman :fix CVE-2025-32743 connman :fix CVE-2025-32366 glib-2.0: fix CVE-2025-4373 go: fix CVE-2025-4673 sudo: upgrade 1.9.15p5 -> 1.9.17p1 go: fix CVE-2025-47907 bind: upgrade 9.18.33 -> 9.18.41 Preeti Sachan (1): ltp: backport patch to fix compilation error for x86_64 Priyal Doshi (2): tzdata/tzcode-native: upgrade 2024b -> 2025a tzdata/tzcode-native: upgrade 2025a -> 2025b Purushottam Choudhary (1): virglrenderer: Add patch to fix -int-conversion build issue Quentin Schulz (14): mmc-utils: fix URL weston-init: fix weston not starting when xwayland is enabled docs: README: specify how to contribute instead of pointing at another file docs: conf.py: silence SyntaxWarning on js_splitter_code ref-manual: classes: reword to clarify that native/nativesdk options are exclusive ref-manual: classes: nativesdk: move note to appropriate section go-helloworld: fix license contributor-guide: submit-changes: fix improper bold string contributor-guide: submit-changes: clarify example with Yocto bug ID contributor-guide: submit-changes: align CC tag description contributor-guide: submit-changes: make the Cc tag follow kernel guidelines contributor-guide: submit-changes: reword commit message instructions contributor-guide: submit-changes: number instruction list in commit your changes contributor-guide: submit-changes: make "Crediting contributors" part of "Commit your changes" Rajeshkumar Ramasamy (2): glib-networking: fix CVE-2025-60018 glib-networking: fix CVE-2025-60019 Randy MacLeod (1): systemd: stable update 255.4 -> 255.13 Ranjitsinh Rathod (1): rust: Add new varaible RUST_ENABLE_EXTRA_TOOLS Rasmus Villemoes (1): iptables: remove /etc/ethertypes Regis Dargent (1): udev-extraconf: fix network.sh script did not configure hotplugged interfaces Richard Purdie (60): selftest/cases/runtime_test: Exclude centos-9 from virgl tests cve-exclusion: Drop the version comparision/warning bitbake: codeparser/data: Ensure module function contents changing is accounted for bitbake: codeparser: Skip non-local functions for module dependencies pseudo: Update to pull in python 3.12+ fix layer.conf: Add os-release to SIGGEN_EXCLUDERECIPES_ABISAFE oeqa/sdk/case: Ensure DL_DIR is populated with artefacts if used create-spdx-3.0/populate_sdk_base: Add SDK_CLASSES inherit mechanism to fix tarball SPDX manifests pseudo: Fix to work with glibc 2.40 pseudo: Update to include open symlink handling bugfix nasm: Upgrade 2.16.01 -> 2.16.03 oeqa/runtime/ssh: In case of failure, show exit code and handle -15 (SIGTERM) oeqa/selftest/reproducibile: Explicitly list virtual targets expat: 2.6.2 -> 2.6.3 ruby: Make docs generation deterministic libedit: Make docs generation deterministic buildhistory: Simplify intercept call sites and drop SSTATEPOSTINSTFUNC usage scripts/install-buildtools: Update to 5.0.3 bitbake.conf: Add truncate to HOSTTOOLS license: Fix directory layout issues libsdl2: Fix non-deterministic configure option for libsamplerate bitbake: tests/fetch: Use our own mirror of sysprof to decouple from gnome gitlab bitbake: tests/fetch: Use our own mirror of mobile-broadband-provider to decouple from gnome gitlab cve_check: Use a local copy of the database during builds pseudo: Fix envp bug and add posix_spawn wrapper oeqa/runtime/ssh: Rework ssh timeout oeqa/runtime/ssh: Fix incorrect timeout fix qemurunner: Clean up serial_lock handling bitbake: fetch2/git: Use quote from shlex, not pipes bitbake: fetch/wget: Increase timeout to 100s from 30s bitbake: runqueue: Fix performance of multiconfigs with large overlap bitbake: runqueue: Optimise setscene loop processing bitbake: runqueue: Fix scenetask processing performance issue do_package/sstate/sstatesig: Change timestamp clamping to hash output only selftest/reproducible: Drop rawlogs selftest/reproducible: Clean up pathnames resulttool: Allow store to filter to specific revisions resulttool: Use single space indentation in json output oeqa/utils/gitarchive: Return tag name and improve exclude handling resulttool: Fix passthrough of --all files in store mode resulttool: Add --logfile-archive option to store mode resulttool: Handle ltp rawlogs as well as ptest resulttool: Clean up repoducible build logs resulttool: Trim the precision of duration information resulttool: Improve repo layout for oeselftest results cve-update-nvd2-native: Tweak to work better with NFS DL_DIR bitbake: tests/fetch: Fix git shallow test failure with git >= 2.48 bitbake: utils: Print information about lock issue before exiting bitbake: utils: Tweak lock_timeout logic bitbake: utils: Add signal blocking for lock_timeout bitbake: event/utils: Avoid deadlock from lock_timeout() and recursive events bitbake: toaster/tests/buildtest: Switch to new CDN bitbake: fetch2: Avoid deprecation warning sstatetests: Switch to new CDN local.conf.sample: Switch to new CDN bitbake: ast: Change deferred inherits to happen per recipe brief-yoctoprojectqs/ref-manual: Switch to new CDN bitbake: test/fetch: Switch u-boot based test to use our own mirror mtools: upgrade 4.0.46 -> 4.0.47 bitbake: utils: Optimise signal/sigmask performance Robert Kovacsics (1): sdk: Fix path length limit to match reserved size Robert P. J. Day (7): Clean up explanation of minimum required version numbers overview-manual: small number of pedantic cleanups bsp guide: update kernel version example to 6.12 bsp-guide: update lonely "4.12" kernel reference to "6.12" bsp-guide: update all of section 1.8.2 to reflect current beaglebone conf file variables.rst: remove references to obsolete tar packaging overview-manual/yp-intro.rst: update on-target packaging info Robert Yang (7): bitbake: data_smart: Improve performance for VariableHistory release-notes-5.0.rst: NO_OUTPUT -> NO_COLOR bitbake: gitsm: Add call_process_submodules() to remove duplicated code bitbake: gitsm: Remove downloads/tmpdir when failed cml1.bbclass: do_diffconfig: Don't override .config with .config.orig libgcrypt: Fix building error with '-O2' in sysroot path groff: Fix race issues for parallel build Rogerio Guerra Borin (1): u-boot: ensure keys are generated before assembling U-Boot FIT image Rohini Sangam (1): vim: Upgrade 9.1.0698 -> 9.1.0764 Roland Kovacs (3): gnupg: update 2.4.5 -> 2.4.8 libxml2: fix CVE-2025-49795 sqlite3: fix CVE-2025-6965 Ross Burton (31): cpio: mark CVE-2023-7216 as disputed fribidi: upgrade 1.0.13 -> 1.0.14 gstreamer1.0: skip another known flaky test libportal: fix rare build race meson: don't use deprecated pkgconfig variable curl: skip FTP tests in run-ptest gawk: update patch status python3-pycryptodome(x): use python_setuptools_build_meta build class gstreamer1.0: disable flaky baseparser tests librsvg: don't try to run target code at build time icu: update patch Upstream-Status strace: download release tarballs from GitHub tcl: skip io-13.6 test case groff: fix rare build race in hdtbl sanity: check for working user namespaces python3: add dependency on -compression to -core classes/nativesdk: also override TUNE_PKGARCH classes/qemu: use tune to select QEMU_EXTRAOPTIONS, not package architecture oeqa/selftest/rust: skip on all MIPS platforms Remove all mention of core-image-lsb ref-manual: don't refer to poky-lsb ref-manual: remove OE_IMPORTS puzzles: ignore three new CVEs for a different puzzles xserver-xf86-config: add a configuration fragment to disable screen blanking xserver-xf86-config: remove obsolete configuration files grub2: fix CVE-2024-56738 libxslt: apply patch for CVE-2025-7424 expect: update code for Tcl channel implementation expect: don't run aclocal in do_configure expect: cleanup do_install pulseaudio: ignore CVE-2024-11586 Ryan Eatmon (2): u-boot.inc: Refactor do_* steps into functions that can be overridden uboot: Allow for customizing installed/deployed file names Sana Kazi (1): gcc-cross-canadian.inc: Fix buildpaths error for pthread.h Sandeep Gundlupet Raju (1): tune-cortexr52: Remove aarch64 for ARM Cortex-R52 Saravanan (2): python3-xmltodict: fix CVE-2025-9375 cmake: fix CVE-2025-9301 Savvas Etairidis (1): systemd: Rename systemd_v255.21 to systemd_255.21 Sergei Zhmylev (1): lsb-release: fix Distro Codename shell escaping Shubham Kulkarni (1): libpam: Update fix for CVE-2024-10041 Shunsuke Tokumoto (1): python3-setuptools: Add "python:setuptools" to CVE_PRODUCT Siddharth Doshi (5): Tiff: Security fix for CVE-2024-7006 vim: Upgrade 9.1.0114 -> 9.1.0682 wpa-supplicant: Upgrade 2.10 -> 2.11 vim: Upgrade 9.1.0682 -> 9.1.0698 openssl: Upgrade 3.2.2 -> 3.2.3 Simon A. Eugster (1): documentation: Fix typo in standards.md Simone Weiß (3): tzdata: Add tzdata.zi to tzdata-core package sanity: Check if tar is gnutar curl: Ignore CVE-2024-32928 Soumya Sambu (12): python3-idna: upgrade 3.6 -> 3.7 python3-certifi: Fix CVE-2024-39689 python3-setuptools: Fix CVE-2024-6345 python3: Fix CVE-2024-7592 python3: Fix CVE-2024-8088 python3-requests: upgrade 2.32.1 -> 2.32.2 python3-requests: upgrade 2.32.0 -> 2.32.3 python3-jinja2: upgrade 3.1.4 -> 3.1.6 git: Upgrade 2.44.1 -> 2.44.3 elfutils: Fix CVE-2025-1371 elfutils: Fix CVE-2025-1376 elfutils: Fix CVE-2025-1377 Stanislav Vovk (1): libpam: fix CVE-2024-10963 Stefan Mueller-Klieser (1): kernel-arch: add macro-prefix-map in KERNEL_CC Steve Sakoman (35): Revert "apt: runtime error: filename too long (tmpdir length)" poky.conf: bump version for 5.0.3 build-appliance-image: Update to scarthgap head revision Revert "wpa-supplicant: Upgrade 2.10 -> 2.11" poky.conf: bump version for 5.0.4 build-appliance-image: Update to scarthgap head revision build-appliance-image: Update to scarthgap head revision release-notes-4.0: update BB_HASHSERVE_UPSTREAM for new infrastructure poky.conf: bump version for 5.0.5 build-appliance-image: Update to scarthgap head revision webkitgtk: fix erroneous use of unsuported DEBUG_LEVELFLAG variable llvm: reduce size of -dbg package poky.conf: bump version for 5.0.6 build-appliance-image: Update to scarthgap head revision poky.conf: bump version for 5.0.7 build-appliance-image: Update to scarthgap head revision Revert "rust: Add new varaible RUST_ENABLE_EXTRA_TOOLS" build-appliance-image: Update to scarthgap head revision poky.conf: add ubuntu2404 to SANITY_TESTED_DISTROS poky.conf: bump version for 5.0.8 build-appliance-image: Update to scarthgap head revision Revert "gcc-cross-canadian.inc: Fix buildpaths error for pthread.h" poky.conf: bump version for 5.0.9 build-appliance-image: Update to scarthgap head revision poky.conf: bump version for 5.0.10 build-appliance-image: Update to scarthgap head revision poky.conf: bump version for 5.0.11 build-appliance-image: Update to scarthgap head revision Revert "sudo: Fix CVE-2025-32462" poky.conf: bump version for 5.0.12 build-appliance-image: Update to scarthgap head revision selftest/cases/meta_ide.py: use use gnu mirror instead of main server oeqa/sdk/cases/buildcpio.py: use gnu mirror instead of main server poky.conf: bump version for 5.0.13 build-appliance-image: Update to scarthgap head revision Sunil Dora (2): gcc: Fix c++: tweak for Wrange-loop-construct binutils: Fix CVE-2025-1153 Talel BELHAJ SALEM (1): dev-manual/building.rst: add note about externalsrc variables absolute paths Talel BELHAJSALEM (1): contributor-guide: Remove duplicated words Teresa Remmet (1): recipes-bsp: usbutils: Fix usb-devices command using busybox Trevor Gamblin (7): python3: skip test_concurrent_futures/test_deadlock python3: skip test_multiprocessing/test_active_children test maintainers.inc: add self for unassigned python recipes python3: upgrade 3.12.4 -> 3.12.5 python3: skip readline limited history tests python3-urllib3: upgrade 2.2.1 -> 2.2.2 reproducible-builds.rst: show how to build a single package Trevor Woerner (5): contributor-guide/submit-changes: encourage patch version changelogs ref-manual/variables.rst: document WIC_CREATE_EXTRA_ARGS sphinx-lint: trailing whitespace sphinx-lint: missing space after literal sphinx-lint: unbalanced inline literal markup Ulrich Ölmann (1): initramfs-framework: fix typos Victor Giraud (1): busybox: fix CVE-2022-48174 Victor Kamensky (1): systemtap: fix systemtap-native build error on Fedora 40 Vijay Anusuri (44): openssh: fix CVE-2024-39894 apr: upgrade 1.7.4 -> 1.7.5 libpcap: Security fix for CVE-2023-7256 & CVE-2024-8006 xserver-xorg: upgrade 21.1.13 -> 21.1.14 glib-2.0: Backport fix for CVE-2024-52533 bind: Upgrade 9.18.28 -> 9.18.33 openssh: Fix CVE-2025-26466 xwayland: Fix CVE-2024-9632 xwayland: Fix CVE-2025-26594 xwayland: Fix CVE-2025-26595 xwayland: Fix CVE-2025-26596 xwayland: Fix CVE-2025-26597 xwayland: Fix CVE-2025-26598 xwayland: Fix CVE-2025-26599 xwayland: Fix CVE-2025-26600 xwayland: Fix CVE-2025-26601 libtasn1: upgrade 4.19.0 -> 4.20.0 xserver-xorg: upgrade 21.1.15 -> 21.1.16 libxslt: upgrade 1.1.39 -> 1.1.43 vim: Upgrade 9.1.1115 -> 9.1.1198 libsoup: Fix CVE-2025-32910 libsoup: Fix CVE-2025-32909 libsoup: Fix CVE-2025-32911 & CVE-2025-32913 libsoup: Fix CVE-2025-32912 libsoup: Fix CVE-2025-32906 libsoup-2.4: Fix CVE-2024-52530 libsoup-2.4: Fix CVE-2024-52531 libsoup-2.4: Fix CVE-2024-52532 libsoup-2.4: Fix CVE-2025-32906 libsoup-2.4: Fix CVE-2025-32909 libsoup: Fix CVE-2025-32914 openssh: Fix for CVE-2025-32728 libsoup-2.4: Fix CVE-2025-32910 libsoup-2.4: Fix CVE-2025-32911 & CVE-2025-32913 libsoup-2.4: Fix CVE-2025-32912 libsoup-2.4: Fix CVE-2025-32914 python3-setuptools: Fix CVE-2025-47273 kea: upgrade 2.4.1 -> 2.4.2 sudo: Fix CVE-2025-32462 git: Upgrade 2.44.3 -> 2.44.4 xserver-xorg: upgrade 21.1.6 -> 21.1.18 cups: upgrade 2.4.10 -> 2.4.11 cups: Fix for CVE-2025-58060 and CVE-2025-58364 gstreamer1.0-plugins-bad: Fix CVE-2025-3887 Virendra Thakur (3): rust-cross-canadian: Set CVE_STATUS ignore for CVE-2024-43402 util-linux: Add fix to isolate test fstab entries using CUSTOM_FSTAB curl: set conditional CVE_STATUS for CVE-2025-5025 Vishwas Udupa (1): openssl: rewrite ptest installation Vrushti Dabhi (1): curl: update CVE_STATUS for CVE-2025-5025 Vyacheslav Yurkov (1): systemd: Password agents shouldn't be optional Wadim Egorov (1): watchdog: Set watchdog_module in default config Wang Mingyu (18): ed: upgrade 1.20.1 -> 1.20.2 llvm: upgrade 18.1.5 -> 18.1.6 mesa: upgrade 24.0.5 -> 24.0.7 wireless-regdb: upgrade 2024.01.23 -> 2024.05.08 orc: upgrade 0.4.38 -> 0.4.39 cups: upgrade 2.4.9 -> 2.4.10 libadwaita: upgrade 1.5.1 -> 1.5.2 libdnf: upgrade 0.73.1 -> 0.73.2 wireless-regdb: upgrade 2024.05.08 -> 2024.07.04 cryptodev: upgrade 1.13 -> 1.14 orc: upgrade 0.4.39 -> 0.4.40 wireless-regdb: upgrade 2024.07.04 -> 2024.10.07 gnupg: upgrade 2.4.4 -> 2.4.5 xserver-xorg: upgrade 21.1.14 -> 21.1.15 ghostscript: upgrade 10.05.0 -> 10.05.1 mtools: upgrade 4.0.44 -> 4.0.45 mtools: upgrade 4.0.45 -> 4.0.46 mtools: upgrade 4.0.47 -> 4.0.48 Weisser, Pascal (1): ref-manual: Add missing variable IMAGE_ROOTFS_MAXSIZE Weisser, Pascal.ext (1): qemuboot: Trigger write_qemuboot_conf task on changes of kernel image realpath Xiangyu Chen (2): qemu: Upgrade 8.2.1 -> 8.2.2 lttng-modules: fix sched_stat_runtime changed in Linux 6.6.66 Yash Shinde (4): binutils: Fix CVE-2024-53589 binutils: Fix CVE-2025-7546 binutils: fix CVE-2025-11081 binutils: fix CVE-2025-8225 Yi Zhao (5): libcap-ng: upgrade 0.8.4 -> 0.8.5 libcap-ng-python: upgrade 0.8.4 -> 0.8.5 rpm: fix expansion of %_libdir in macros iputils: Security fix for CVE-2025-47268 kea: set correct permissions for /var/run/kea Yogita Urade (10): qemu: upgrade 8.2.2 -> 8.2.3 qemu: fix CVE-2024-4467 ruby: upgrade 3.2.2 -> 3.3.5 qemu: upgrade 8.2.3 -> 8.2.7 curl: fix CVE-2024-11053 curl: fix CVE-2025-0167 python3-urllib3: fix CVE-2025-50181 curl: fix CVE-2025-9086 tiff: fix CVE-2025-9900 tiff: ignore CVE-2025-8961 Zhang Peng (3): avahi: fix CVE-2024-52616 mpg123: upgrade 1.32.6 -> 1.32.10 avahi: fix CVE-2024-52615 aszh07 (3): xz: Update LICENSE variable for xz packages ffmpeg: Add "libswresample libavcodec" to CVE_PRODUCT libarchive: Fix CVE-2024-20696 rajmohan r (1): glibc-y2038-tests: remove glibc-y2038-tests_2.39.bb recipe meta-openembedded: 78a14731cf..15e18246dd: Adrian Freihofer (2): networkmanager: remove modemmanager rdepends thrift: fix build with gcc 15 Alexandre Truong (4): source-han-sans-*-fonts: Switch away from SVN fetcher in SRC_URI lcov: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status hunspell-dictionaries: switch branch from master to main evince: Update status for CVE-2011-0433 and CVE-2011-5244 Alexandre Videgrain (1): openbox: fix crash on alt+tab with fullscreen app AmateurECE (1): pipewire: Add glib-2.0-native dep for bluez5 Andrej Valek (1): externalsrc: fix support in various components Anil Dongare (1): libssh 0.10.6: Fix CVE-2025-8114 Ankur Tyagi (25): tinyproxy: patch CVE-2023-49606 frr: patch CVE-2024-44070 libavif: ignore CVE-2025-48175 libconfuse: patch CVE-2022-40320 hdf5: patch CVE-2025-2913 hdf5: patch CVE-2025-2914 hdf5: patch CVE-2025-2915 hdf5: patch CVE-2025-2923, CVE-2025-6816, CVE-2025-6856 hdf5: patch CVE-2025-2924 hdf5: patch CVE-2025-2925 hdf5: patch CVE-2025-6269, CVE-2025-6270, CVE-2025-6516 libppd: patch CVE-2024-47175 libcupsfilters: patch CVE-2024-47076 libraw: patch CVE-2025-43961 CVE-2025-43962 libraw: patch CVE-2025-43963 libraw: patch CVE-2025-43964 zlog: fix CVE-2024-22857 memcached: patch CVE-2023-46852 memcached: patch CVE-2023-46853 ndpi: ignore CVE-2025-25066 libiec61850: patch CVE-2024-26529 libiec61850: patch CVE-2024-45970 libiec61850: patch CVE-2024-45971 mbedtls: upgrade 3.6.4 -> 3.6.5 hostapd: patch CVE-2025-24912 Archana Polampalli (4): modejs: upgrade 20.18.0 -> 20.18.2 tftpy: fix CVE-2023-46566 tcpreplay: fix CVE-2024-22654 apache2: upgrade 2.4.64 - 2.4.65 Ariel D'Alessandro (1): pipewire: Install missing ALSA config files Armin Kuster (1): Revert "mariadb: fix runtime failure on riscv" Ashish Sharma (2): nginx: Backport fix for CVE-2024-7347 postgresql: Backport fix for CVE-2024-7348 AshishKumar Mishra (1): meta-oe: image: optionally remove RAW image after sparse image creation Awais Belal (2): mongodb: fix build with python 3.12 mongodb: update to 4.4.29 BINDU (1): flatbuffers: adapt for cross-compilation environments Barry Grussling (1): postgresql: Break perl RDEPENDS Bastian Krause (2): libsocketcan: use https instead of git protocol canutils: use https instead of git protocol Benjamin Szőke (1): tree: fix broken links Changqing Li (11): pavucontrol: update SRC_URI libatasmart: Update SRC_URI mariadb: fix runtime failure on riscv dlt-daemon: make DLT_WatchdogSec configurable abseil-cpp: upgrade 20240116.2 -> 20240116.3 nginx: fix CVE-2025-23419 libblockdev: fix CVE-2025-6019 udisks2: Hardening measure of CVE-2025-6019 phpmyadmin: upgrade 5.2.1 -> 5.2.2 luajit: fix several CVEs mariadb: correct STACK_DIRECTION setting Chen Qi (6): libdbd-mysql-perl: avoid invoking assert_lib at do_configure stage python3-protobuf: remove useless and problematic .pth file graphviz: remove obsolete and problematic patch protobuf: fix CVE-2024-7254 protobuf: upgrade from 4.25.3 to 4.25.8 python3-protobuf: upgrade from 4.25.3 to 4.25.8 Chris Laplante (1): poco: fix branch: master => poco-1.12.5 Christos Gavros (1): corosync: reproducibility issue Claus Stovgaard (2): lcov: sort RDEPENDS alphabetical lcov: Add missing RDEPENDS Clayton Casciato (1): chrony: use inherit_defer for conditional inherit of useradd Deepak Rathore (1): protobuf 4.25.8: Mark CVE-2024-7254 as patched Divya Chellam (7): nginx: upgrade 1.25.3 -> 1.25.4 redis: upgrade 7.2.6 -> 7.2.7 krb5: fix CVE-2025-24528 openvpn: upgrade 2.6.12 -> 2.6.14 libssh: fix CVE-2025-4878 libssh: fix CVE-2025-5987 jq: fix CVE-2025-9403 Dmitry Baryshkov (1): android-tools: Create flag file /etc/usb-debugging-enabled Esben Haabendal (1): netplan: add missing runtime dependencies Etienne Cordonnier (3): uutils-coreutils: upgrade 0.0.25 -> 0.0.26 uutils-coreutils: upgrade 0.0.26 -> 0.0.27 uutils-coreutils: fix compilation with selinux Fabrice Aeschbacher (1): mosquitto: upgrade 2.0.18 -> 2.0.19 Fathi Boudra (2): python3-django: upgrade 4.2.11 -> 4.2.16 python3-django: upgrade 5.0.4 -> 5.0.9 Frank de Brabander (3): python3-pydantic-core: fix incompatible version python3-pydantic-core: fix TMPDIR path reference python3-pydantic-core: add missing RDEPENDS for ptest Grygorii Tertychnyi (1): libusbgx: fix gadget-stop install Guocai He (6): python3-pylint: correct the SRC_URI libconfig: correct the SRC_URI logcheck: correct the SRC_URI thrift: correct the SRC_URI softhsm: correct the SRC_URI mariadb: File conflicts for multilib Guðni Már Gilbert (1): mbedtls: upgrade 3.6.3.1 -> 3.6.4 Gyorgy Sarvari (35): poppler: fix typos in CVE-2025-52886-0001.patch mod-dnssd: update SRC_URI mosh: set working SRC_URI psqlodbc: set valid SRC_URI collectd: set working SRC_URI apache2: ignore irrelevant CVEs civetweb: patch CVE-2025-55763 dovecot: patch CVE-2022-30550 pm-qa: update git fetch protocol tokyocabinet: switch to working SRC_URI tokyocabinet: fix license iperf2: ignore irrelevant CVEs jasper: patch CVE-2025-8835 jasper: patch CVE-2025-8836 jasper: patch CVE-2025-8837 etcd: patch CVE-2023-32082 freerdp3: patch CVE-2024-32039 and CVE-2024-32041 freerdp3: patch CVE-2024-32040 freerdp3: patch CVE-2024-32458 freerdp3: patch CVE-2024-32459 freerdp3: patch CVE-2024-32460 freerdp3: patch CVE-2024-32658 freerdp3: patch CVE-2025-32659 freerdp3: patch CVE-2024-32660 freerdp3: patch CVE-2024-32661 freerdp3: patch CVE-2024-32662 exiv2: patch CVE-2025-26623 exiv2: patch CVE-2025-54080 exiv2: patch CVE-2025-55304 redis: upgrade 6.2.18 -> 6.2.20 emacs: patch CVE-2024-30202 emacs: patch CVE-2024-30203 emacs: patch CVE-2024-30204 emacs: patch CVE-2024-30205 emacs: patch CVE-2024-39331 Haixiao Yan (4): openvpn: fix CVE-2024-28882 openvpn: upgrade 2.6.10 -> 2.6.12 lmsensors: Clean stale files for sensord to avoid incorrect GCC header dependencies python3-posix-ipc: fix runtime error Harish Sadineni (1): bpftool: Add support for riscv64 Hieu Van Nguyen (1): gphoto2: Fix contains reference to TMPDIR [buildpaths] warning Hitendra Prajapati (8): tgt: fix CVE-2024-45751 libssh: fix CVE-2025-5318 redis: fix CVE-2025-32023 libssh: fix CVE-2025-5351 & CVE-2025-5372 open-vm-tools: fix CVE-2025-22247 libssh: fix CVE-2025-4877 openjpeg: fix for CVE-2025-54874 libjxl: fix CVE-2024-11403 & CVE-2024-11498 Hongxu Jia (1): nodejs: support cross compile without qemu user conditionally J. S (2): nodejs: upgrade 20.16.0 -> 20.17.0 nodejs: upgrade 20.17.0 -> 20.18.0 J. S. (3): znc: Fix buildpaths QA errors nodejs: cleanup xfce4 update HOMEPAGEs Jan Vermaete (1): python3-werkzeug: added python3-difflib as RDEPENDS Jason Schonberg (1): nodejs: upgrade 20.13.0 -> 20.16.0 Jef Driesen (2): nginx: fix the tarball and license checksums lcov: Add missing RDEPENDS for nativesdk Jeroen Hofstee (5): nodejs: backport a patch to prevent brotli crashing nodejs can-utils: fix printing / reading timestamps can-utils: handle CAN_ERR_CNT correctly php: ignore CVE-2024-3566 nodejs: ignore CVE-2024-3566 Jeroen Knoops (1): nng: Rename default branch of github.com:nanomsg/nng.git Jiaying Song (15): rrdtool: Fix do_populate_sysroot QA issues nftables: change ptest output format debootstrap: fix do_fetch error wireguard-tools: fix do_fetch error vlock: fix do_fetch error openipmi: upgrade 2.0.34->2.0.36 tcpreplay: fix CVE-2023-43279 xfce-dusk-gtk3: fix do_fetch error eject: fix do_fetch error libdev-checklib-perl: fix do_fetch error xmlsec1: Switch SRC_URI to use github release chrony: fix do_fetch error v4l-utils: Fix QA and build errors related to _TIME_BITS on 32-bit webkitgtk3: update 2.44.1 -> 2.44.3 webkitgtk3: fix do_configure error on beaglebone-yocto Jinfeng Wang (2): netplan: Fix CVE-2022-4968 postfix: fix rootfs file difference Justin Bronder (1): python3-xmodem: replace hardcoded /usr with ${prefix} Khem Raj (32): python3-pydantic-core: Fix build with python 3.12.4 log4cpp: Fix buildpaths QA error python3-pydantic: Upgrade to 2.7.3 mariadb: Upgrade to 10.11.9 release ndisc: Remove buildpaths from binaries ndisc6: Fix reproducible build ghex,gnome-chess,gnome-photos: Add missing dep on itstool-native nodejs: Upgrade to 20.13.0 release nodejs: Fix build with libc++ 19 wolfssl: Add packageconfig for reproducible build blueman: Fix buildpathe issue with cython generated code botan: Make it reproducible keepalived: Make build reproducible ldns: Fix buildpaths QA issues python3-kivy: Remove buildpaths from comments in generated C sources python3-pyproj: Fix buildpaths QA Error python3-pyproj: Remove absolute paths from cython generated .c files python3-pycocotools: Remove absolute paths from comments lprng: Specify target paths for needed utilities fwknop: Specify target locations of gpg and wget e2tools: Fix buildpaths QA warning in config.status in ptest sharutils: Let POSIX_SHELL be overridable from environment python3-posix-ipc: switch to PEP-517 build backend gtkwave: Add libtirpc to depends ssmping: Use debian mirror for SRC_URI enca: Fix cross builds ckermit: Define return type for main ckermit: Fix build with GCC-15 procmail: Fix build with GCC-14 uim: Stick to C17 freerdp: Upgrade 2.11.2 -> 2.11.7 influxdb: Do not remove non-existing files Leon Anavi (2): sip: Upgrade 6.8.3 -> 6.8.6 sip: Fix homepage and license Leonard Anderweit (1): lmsensors: Fix build without sensord Libo Chen (3): thin-provisioning-tools: install missed thin_shrink and era_repair grpc: Fix CVE-2024-7246 libgpiod: fix gpiod-cxx-test failed test case Marc Ferland (2): polkit: update SRC_URI libvncserver: fix generated LibVNCServerTargets.cmake Markus Volk (4): exiv2: update 0.28.0 -> 0.28.2 gnome-remote-desktop: update 46.1 -> 46.2 geary: add itstool-native dependency eog: add itstool-native dependency Martin Jansa (13): bolt: package systemd_system_unitdir correctly giflib: fix build with gold and avoid imagemagick-native dependency Revert "gcab: ignore buildpaths error from sources" gpm: fix buildpaths QA issue xerces-c: fix buildpaths QA issue xmlrpc-c: update SRCREV lapack: add PACKAGECONFIG for cblas lapack: fix buildpaths in ptest also when CBLAS is enabled gcab: fix buildpaths QA issue python3-posix-ipc: improve build_support python3-h5py: backport fixes for incompatible-pointer-types issues abseil-cpp: fix build with gcc-15 on host nodejs: fix build with gcc-15 on host Martin Schwan (1): linuxptp: Add systemd instance specifier for ptp4l dependency Michael Olbrich (1): nftables: avoid python dependencies when building without python Michael Opdenacker (1): kernel-hardening-checker: backport recipe Mikko Rapeli (3): fwupd: skip buildpaths errors gcab: ignore buildpaths error from sources libjcat: skip buildpaths check Mingli Yu (2): asio: Add ptest support ptest-packagelists-meta-oe.inc: Add asio Neel Gandhi (1): v4l-utils: Install media ctrl header and library files Nikhil R (2): nftables: Conditionally add ${PN}-python as RDEPENDS for ptest rocksdb: Add an option to set static library Niko Mauno (16): python3-xlsxwriter: Fix LICENSE python3-cbor2: Fix LICENSE and LIC_FILES_CHKSUM python3-crc32c: Amend LICENSE declaration python3-email-validator: Fix LICENSE python3-lru-dict: Fix LICENSE and change SUMMARY to DESCRIPTION python3-mock: Fix LICENSE python3-parse-type: Fix LICENSE python3-pillow: Fix LICENSE and change SUMMARY to DESCRIPTION python3-platformdirs: Fix LICENSE python3-colorama: Fix LICENSE python3-fann2: Fix LICENSE python3-nmap: Fix LICENSE and LIC_FILES_CHKSUM python3-pycurl: Fix LICENSE python3-googleapis-common-protos: Fix LIC_FILES_CHKSUM python3-haversine: Fix LIC_FILES_CHKSUM python3-libevdev: Fix LIC_FILES_CHKSUM Ninette Adhikari (6): imagemagick: Update status for CVE imagemagick: Update status for CVE imagemagick: Update status for CVE xsp: CVE status update for CVE-2006-2658 influxdb: Update CVE status for CVE-2019-10329 monkey: Update status for CVE-2013-2183 Peter Kjellerstedt (6): hostapd: Support running "devtool modify hostapd" hostapd: Only include the relevant parts from README in LIC_FILES_CHKSUM libjs-jquery-icheck: Correct LIC_FILES_CHKSUM libdevmapper: Inherit nopackages ebtables: Remove the dependecy on bash libeigen: Remove LGPL code Peter Marko (41): libndp: Patch CVE-2024-5564 squid: patch CVE-2024-37894 hostapd: Patch CVE-2024-3596 hostapd: Patch security advisory 2024-2 nss: patch CVE-2024-6602 nss: patch CVE-2024-6609 squid: conditionally set status of CVE-2024-45802 thrift: fix c++ generated code compilation with clang grpc: patch CVE-2024-11407 python3-grpcio: patch CVE-2024-11407 python3-grpcio(-tools): fix build concurrency issue libmodbus: patch CVE-2024-10918 libmodbus: ignore CVE-2023-26793 and CVE-2024-34244 libcoap: patch CVE-2024-31031 spdlog: patch CVE-2025-6140 minifi-cpp: patch spdlog CVE-2025-6140 poco: ignore additional failing tests poco: patch CVE-2025-6375 nginx: patch CVE-2025-53859 fontforge: patch CVE-2024-25081 and CVE-2024-25082 fcgi: patch CVE-2025-23016 procmail: patch CVE-2014-3618 procmail: patch CVE-2017-16844. ace: ignore CVE-2009-1147 audiofile: fix multiple CVEs audiofile: patch CVE-2017-6829 audiofile: fix multiple CVEs audiofile: patch CVE-2017-6831 audiofile: patch CVE-2017-6839 emlog: set CVE_PRODUCT freerdp: patch CVE-2024-32661 freerdp: mark CVE-2024-32662 as fixed freerdp3: set CVE_PRODUCT corosync: fix upstream version check corosync: upgrade 3.1.6 -> 3.1.9 corosync: patch CVE-2025-30472 dash: set CVE_PRODUCT gattlib: mark CVE-2019-6498 as fixed memcached: ignore disputed CVE-2022-26635 monkey: ignore CVE-2013-1771 squid: patch CVE-2025-59362 Poonam Jadhav (1): tcpreplay: Fix CVE-2023-4256 Praveen Kumar (4): php: upgrade 8.2.28 -> 8.2.29 polkit: fix CVE-2025-7519 yasm: fix CVE-2024-22653 cjson: upgrade 1.7.18 -> 1.7.19 Preeti Sachan (1): bpftool: fix libelf.h not found error Raghuvarya S (2): android-tools-adbd.service: Update ConditionPathExists to /etc android-toold-adbd: Fix inconsistency between selinux configurations Rajeshkumar Ramasamy (1): open-vm-tools: fix CVE-2025-41244 Randolph Sapp (2): opencl-clhpp: add native and nativesdk vulkan-cts: allow vulkan versions > 1.3 Randy MacLeod (1): python3-pyyaml-include: support native and nativesdk build Robert Yang (1): hostapd: Add CVE id to CVE-2024-3596_00.patch Roland Kovacs (2): jq-1.7.1: Backport multiple CVE fixes jq: add Upstream-Status and CVE tags into .patch files Ryan Eatmon (1): kernel-selftest: Update to allow for turning on all tests Sana Kazi (2): libp11: Treat all openssl-3.x releases the same imagemagick: guard sed operations in do_install for optional files Saravanan (2): udisks2: upgrade 2.10.1 -> 2.10.2 fio: fix CVE-2025-10823 Scott Murray (2): python3-grpcio: Fix build with gcc-14 python3-grpcio: backport abseil-cpp RISC-V fix Shubham Pushpkar (2): wireshark 4.2.7: Fix CVE-2024-9781 cjson 1.7.18: Fix CVE-2025-57052 Siddharth Doshi (2): apache2: Upgrade 2.4.59 -> 2.4.60 apache2: Upgrade 2.4.60 -> 2.4.62 Sofiane HAMAM (2): Wolfssl: add ptest wolfssl: Upgrade 5.7.0 -> 5.7.2 Soumya Sambu (14): python3-sqlparse: Fix CVE-2024-4340 python3-werkzeug: upgrade 3.0.1 -> 3.0.3 gtk+: Fix CVE-2024-6655 python3-twisted: Fix CVE-2024-41671 python3-flask-cors: Fix CVE-2024-6221 python3-werkzeug: upgrade 3.0.3 -> 3.0.6 python3-tornado: Upgrade 6.4 -> 6.4.2 python3-django: upgrade 4.2.16 -> 4.2.17 python3-django: upgrade 5.0.9 -> 5.0.10 python3-django: upgrade 5.0.10 -> 5.0.11 python3-django: upgrade 4.2.17 -> 4.2.18 php: Upgrade 8.2.26 -> 8.2.28 iniparser: Fix CVE-2025-0633 python3-django: upgrade 4.2.18 -> 4.2.20 Sunil Dora (1): layer.conf: add bpftrace to NON_MULTILIB_RECIPES Swamil Jain (1): kmsxx: Revert to using original name for kmstest Thomas Roos (1): libcamera: backport 0.4.0 from master-next Tim Orling (1): python3-pydantic: upgrade 2.7.3 -> 2.7.4 Trevor Woerner (2): apache2: use update-alternatives for httpd iperf3: throughput fix Vijay Anusuri (16): krb5: upgrade 1.21.2 -> 1.21.3 wireshark: upgrade 4.2.4 -> 4.2.5 wireshark: upgrade 4.2.5 -> 4.2.7 php: upgrade 8.2.24 -> 8.2.26 openjpeg: upgrade 2.5.0 -> 2.5.3 postgresql: upgrade 16.5 -> 16.8 wireshark: upgrade 4.2.7 -> 4.2.9 proftpd: Fix CVE-2024-57392 redis: upgrade 7.2.7 -> 7.2.8 wireshark: upgrade 4.2.9 -> 4.2.12 proftpd: Fix CVE-2023-51713 apache2: Upgrade 2.4.62 -> 2.4.64 poppler: Fix CVE-2025-43718 redis: upgrade 7.2.8 -> 7.2.11 redis: upgrade 6.2.16 -> 6.2.18 vorbis-tools: Fix CVE-2023-43361 Virendra Thakur (2): opensc: Fix multiple cve CVE-2024-45615-45616-45617-45618-45619-45620 unbound: Fix CVE-2024-8508 Wang Mingyu (18): python3-email-validator: upgrade 2.1.0 -> 2.1.1 python3-pydantic: upgrade 2.7.0 -> 2.7.1 cjson: upgrade 1.7.17 -> 1.7.18 samba: upgrade 4.19.7 -> 4.19.8 postgresql: upgrade 16.3 -> 16.4 redis: upgrade 7.2.4 -> 7.2.5 mosquitto: upgrade 2.0.19 -> 2.0.20 uutils-coreutils: upgrade 0.0.27 -> 0.0.28 nana: Fix buildpaths warning. fetchmail: Fix buildpaths warning. fetchmail: disable rpath to fix buildpaths warning. python3-posix-ipc: upgrade 1.1.1 -> 1.2.0 mbedtls: upgrade 3.6.3 -> 3.6.3.1 geoip: fix do_fetch error rp-pppoe: update SRC_URI procmail: fix build failure with gcc-14 procmail: Add -Wno-implicit-int to fix error of do_compile libiec61850: upgrade 1.5.1 -> 1.5.3 Wentao Zhang (1): meta-oe/conf/layer.conf: remove libbpf from NON_MULTILIB_RECIPES for x86 and x86-64 Xiangyu Chen (1): crash: fix crash cannot work with kaslr Yi Zhao (12): samba: upgrade 4.19.6 -> 4.19.7 mbedtls: upgrade 3.6.0 -> 3.6.1 mbedtls: upgrade 2.28.8 -> 2.28.9 libldb: upgrade 2.8.0 -> 2.8.1 mbedtls: upgrade 3.6.1 -> 3.6.2 freeradius: upgrade 3.2.3 -> 3.2.5 hostapd: Security fix for CVE-2023-52160 redis: upgrade 7.2.5 -> 7.2.6 mbedtls: upgrade 2.28.9 -> 2.28.10 mbedtls: 3.6.2 -> 3.6.3 wxwidgets: upgrade 3.2.1 -> 3.2.6 redis: upgrade 6.2.14 -> 6.2.16 Yoann Congal (3): packagegroup-meta-oe: fix lvgl inclusion mdio-tools: fix mdio-netlink kernel module reproducibility gutenprint: fix a build race-condition Yogesh Tyagi (1): tbb-native: Fix build with gcc-13 Yogita Urade (18): graphviz: fix CVE-2023-46045 hdf5: upgrade to 1.14.4 poppler: CVE-2024-6239 krb5: fix CVE-2024-26458 and CVE-2024-26461 php: upgrade 8.2.20 -> 8.2.24 postgresql: upgrade 16.4 -> 16.5 poppler: fix CVE-2024-56378 poppler: fix CVE-2025-32364 poppler: fix CVE-2025-32365 poppler: fix CVE-2025-43903 syslog-ng: fix CVE-2024-47619 postgresql: upgrade 16.8 -> 16.9 mariadb: upgrade 10.11.9 -> 10.11.12 poppler: fix CVE-2025-52886 poppler: fix CVE-2025-50420 postgresql: upgrade 16.9 -> 16.10 indent: fix CVE-2023-40305 poppler: fix CVE-2025-52885 Zhang Peng (21): hiredis: remove ANSI color from ptest result frr: fix CVE-2024-34088 frr: fix CVE-2024-31950 frr: fix CVE-2024-31951 frr: fix CVE-2024-31948 frr: fix CVE-2024-31949 libgsf: upgrade 1.14.52 -> 1.14.53 glade: fix CVE-2020-36774 opensc: fix CVE-2024-8443 lapack: fix TMPDIR reference in do_package_qa iperf3: upgrade 3.16 -> 3.18 gnuplot: fix CVE-2025-3359 gnuplot: fix CVE-2025-31176 gnuplot: fix CVE-2025-31177 gnuplot: fix CVE-2025-31178 gnuplot: fix CVE-2025-31179 gnuplot: fix CVE-2025-31180 gnuplot: fix CVE-2025-31181 iperf3: fix CVE-2025-54349 iperf3: fix CVE-2025-54350 wxwidgets: fix CVE-2024-58249 Zoltán Böszörményi (1): gutenprint: 5.3.5 akash hadke (1): python3-flatbuffers: provide nativesdk support alperak (8): tayga: Fix contains reference to TMPDIR [buildpaths] warning etcd-cpp-apiv3: Fix contains reference to TMPDIR [buildpaths] warning exiv2: Upgrade 0.28.2 to 0.28.3 for CVE fix jsonrpc: Fix contains reference to TMPDIR [buildpaths] warning rdist: Fix contains reference to TMPDIR [buildpaths] warning perfetto: Fix contains reference to TMPDIR [buildpaths] warning hplip: Fix contains reference to TMPDIR [buildpaths] warning boinc-client: Fix contains reference to TMPDIR [buildpaths] warning gudnimar (1): pipewire: upgrade 1.0.5 -> 1.0.9 hongxu (2): p7zip: fix CVE-2023-52169 and CVE-2023-52168 indent: fix CVE-2024-0911 kjlau0112 (1): mbedtls: drop tag parameter from SRC_URI. mark.yang (1): srecord: fix build failure with gcc-15 meta-raspberrypi: 1918a27419..8767e2ff80: Adam Schafer (1): add raspi-utils recipe to scarthgap branch Andrei Gherzan (1): docs: Fix ReadTheDocs sphinx.configuration requirement Ayoub Zaki (1): raspberrypi5: add bcm2712d0 overlay required for booting up correctly Bassem Nomany (1): mesa: update to 24.3.1 Damiano Ferrari (2): rpi-eeprom: Update to latest release rpi-bootfiles: Update to latest release Florin Sarbu (1): linux-raspberrypi.inc: Change defconfig for RPi3 64 bits Garrett Brown (1): linux: Enable CONFIG_I2C_BRCMSTB for proper HDMI I2C support Gijs Peskens (1): raspberrypi5.conf: Add CM5 dtb's Jaeyoon Jung (1): linux-raspberrypi: Drop deprecated configs from android-driver.cfg Joshua Watt (1): linux-firmware-rpidistro: Fix WiFi on Raspberry Pi 5 Khem Raj (2): linux-raspberrypi-6.6: Upgrade to 6.6.63 rpi-base: Remove bcm2712-rpi-5-b.dtb from RPI_KERNEL_DEVICETREE target Leon Anavi (11): yocto-builder/Dockerfile: Ubuntu 22.04 rpi-base.inc: vc4-kms-dsi-ili9881-7inch.dtbo u-boot_%.bbappend: Increase CONFIG_SYS_BOOTM_LEN wayland-protocols: Upgrade 1.38 -> 1.45 mesa: Upgrade 24.3.1 -> 25.1.3 mesa: Upgrade 25.1.3 -> 25.1.6 mesa_%.bbappend: DISTRO_FEATURES for wayland mesa: wayland-protocols: Fix signatures linux-firmware-rpidistro: Update and stabilize rpi-base.inc: Add w1-gpio-pi5.dtbo rpi-base.inc: Add rpi-backlight.dtbo Markus Volk (4): linux-raspberrypi: add recipe for 6.12 linux-raspberrypi: update 6.12.2 -> 6.12.25 rpi-default-versions: Switch default kernel to 6.12 rpi-bootfiles: update to latest release Martin Jansa (3): docker-build: use --no-cache Revert "rpi-default-versions: Switch default kernel to 6.12" mesa, wayland-protocols: use separate recipe instead of bbappend Matthias Klein (1): linux-firmware-rpidistro: Upgrade to bookworm/20230625-2+rpt3 Omri Sarig (1): linux-firmware-rpidistro: Fix wireless error message on RPi Pierrick Curt (1): rpi-base: build uart dts overlays by default Thomas Roos (1): Moving bcm2712d0.dtbo into rpi-base.inc meta-arm: 58268ddccb..0f1e7bf92c: Amr Mohamed (5): kas: Update kas configuration for fvp-base.yml file arm-systemready/linux-distros: new inc file for unattended installation arm-systemready/linux-distros: Add kickstart file for Fedora unattended arm-systemready/oeqa: Add new test for Fedora unattended installation kas: Add new yml file for Distros unattended installation Ben (3): arm-systemready/linux-distros: Implement unattended openSUSE arm-systemready/oeqa: Add unattended installation testcase kas: Include unattended openSUSE test Bence Balogh (1): arm-bsp/trusted-firmware-m: corstone1000: Fix MPU configuration Harsimran Singh Tungal (1): arm-bsp,kas: corstone1000: enable External System based on new yml file Hugues KAMBA MPIANA (1): arm-bsp/documentation: corstone1000: Add SystemReady IR v2.0 certification Jon Mason (4): arm-toolchain: remove libmount-mountfd-support when using binary toolchain arm-bsp/fvp-base: Get 6.10 kernel working arm/linux-yocto: disable CONFIG_MTD_NAND_FSL_IFC arm-systemready/ir-acs: Update URL Jose Quaresma (1): bsp: optee-client: cleanup old tee-supplicant Luca Fancellu (2): arm/oeqa: Introduce retry mechanism for fvp_devices run_cmd arm/lib: Handle timeout for spawn object on stop() Romain Naour (4): external-arm-toolchain: remove old sed fixup for libc.so external-arm-toolchain: wrap symlink handling under usrmerge check external-arm-toolchain: override dynamic loader path with usrmerge enabled external-arm-toolchain: rebuild libmvec.so symlink if any Ross Burton (5): arm-base/linux-yocto: revert interim 6.10 patch for fvp-base arm-system-ready/arm-systemready-ir-acs: add version to download filename CI: use canonical git.yoctoproject.org URLs arm/execstack-native: add new recipe arm/fvp-base-a-aem: remove spurious executable stack from one library Vasyl Vavrychuk (3): external-arm-toolchain: wrap base_libdir vs libdir manipulations under usrmerge check external-arm-toolchain: in libc.so GNU ld script use base_libdir external-arm-toolchain: remove ${base_libdir}/libpthread*.so from FILES:${PN} meta-security: 11ea91192d..bc865c5276: Hitendra Prajapati (2): clamav: fix CVE-2024-20505 & CVE-2024-20506 libhtp: fix CVE-2024-45797 Vijay Anusuri (2): tpm2-tools: Upgrade 5.5 -> 5.7 tpm2-tss: upgrade 4.0.1 -> 4.0.2 Change-Id: Ief5b086436b2f3a4e819546fcd1bb9a5b1f608dd Signed-off-by: Andrew Geissler <geissonator@yahoo.com> 2023-05-02T18:02:18+00:00 Patrick Williams patrick@stwcx.xyz 2023-05-01T19:19:06+00:00 urn:sha1:8e7b46e2350c3689938f309eaca929aada20b5a0 meta-security: a397a38ed9..53c5cc794f: Anton Antonov (2): Fix PACKAGECONFIG check in Parsec OEQA tests Flush caches after OEQA tests Armin Kuster (6): checksecurity: update to 2.0.16 krill: forced to inclued fetch hashes. suricata: Fixup to work within the recent crate changes. suricata: Missed on crate depends parsec-tool: update SRC_URI hash parsec-service: fix SRC_URI hash Gowtham Suresh Kumar (2): meta-parsec: Disable RSA-OAEP OEQA tests for Parsec PKCS11 backend parsec-service: Update parsec recipes to 1.2.0 and parsec-tool to 0.6.0 Patrick Williams (1): libwhisker2-perl: adjust perl-version variable meta-openembedded: 17243e70c8..c5f330bc9a: Alex Yao (3): lcov: Fix Perl Path lcov: Upgrade 1.14 -> 1.16 lcov: Fix homepage Ari Parkkila (1): python3-appdirs: add native and nativesdk to BBCLASSEXTEND Arsalan H. Awan (1): meta-networking/licenses/netperf: remove unused license Bartosz Golaszewski (11): reboot-mode: put the build artifacts in ${B} libgpiod: enable all features for ptest libgpiod: drop unneeded S assignment libgpiod: generalize the local files directories libgpiod: update to v2.0.1 python3-gpiod: don't hardcode the project version in recipe python3-gpiod: add missing run-time dependencies libgpiod: install the libgpiosim header python3-gpiod: fetch sources from pypi libgpiod: fold libgpiod-src.inc into libgpiod.inc libgpiod: remove test executables from ${bindir} Chen Qi (1): android-tools: fix systemd service setting Enrico Scholz (1): sox: remove ffmpeg dependency Etienne Cordonnier (4): uutils-coreutils: Add crates checksum uutils-coreutils: remove obsolete comment uutils-coreutils: upgrade 0.0.17 -> 0.0.18 uutils-coreutils: disable musl support Ever ATILANO (4): meta-python: python3-path: Add ptest meta-python: python3-lorem: Add ptest meta-oe: recipes-support: dc: Add ptest meta-oe: recipes-extended: bitwise: Add ptest Gianfranco Costamagna (1): vbxguestdrivers: upgrade 7.0.4 -> 7.0.8 Jasper Orschulko (1): python3-gcovr: Add missing runtime dependency Jayanth Othayoth (1): etcd-cpp-apiv3: add recipe Johannes Kirchmair (1): redirect unwanted error message in nginx install Johannes Pointner (1): python3-pyzstd: add new recipe Kai Kang (16): xfce4-taskmanager: 1.5.2 -> 1.5.5 xfce4-terminal: 1.0.0 -> 1.0.4 syslog-ng: not deliver syslog-ng-update-virtualenv xfce4-notifyd: 0.6.3 -> 0.8.2 xfce4-screenshooter: 1.9.10 -> 1.10.3 thunar: 4.18.0 -> 4.18.4 thunar-media-tags-plugin: 0.3.0 -> 0.4.0 libxfce4util: 4.18.0 -> 4.18.1 libxfce4ui: 4.18.0 -> 4.18.3 xfce4-settings: 4.18.0 -> 4.18.2 xfce4-session: 4.18.0 -> 4.18.2 xfce4-panel: 4.18.0 -> 4.18.3 thunar-archive-plugin: 0.5.0 -> 0.5.1 xfce4-power-manager: 4.18.0 -> 4.18.1 garcon: 4.18.0 -> 4.18.1 xfce4-screensaver: 4.16.0 -> 4.18.1 Khem Raj (36): krb5: Fix build with autoconf 2.72 cyrus-sasl: Fix autoconf patch to work with new autoconf 2.72 gmime: Update to 3.2.13 imagemagick: Update to 7.1.1 mpv: Upgrade to 0.35.1 fwknop: Use pkg-config instead of gpgme-config fwknop: Fix AS_IF configure syntax libstemmer: Update to 2.2.0 libidn: Update largefile m4 macros emacs: Fix build with autconf 2.72+ ptest-packagelists-meta-oe: Remove minicoredumper from PTESTS_FAST_META_OE on musl poco: Remove pushd/popd from run-ptest surf: Fix build with gtkwebkit 2.40 libio-pty-perl: Fix build with musl/clang meta-gnome: Update patch status for several recipes libnet-ssleay-perl: Fix patch upstream status meta-xfce: Fix missing upstream status in patches meta-multimedia: Fix missing upstream status in several patches meta-webserver: Fix missing upstream status on patches babl: Drop clang10 workaround for mips/rv64 babl: Package /usr/lib/babl-0.1/ directory libtinyxml2: Add ptest support ptest-packagelists-meta-oe: Add libtinyxml2 minifi-cpp: Always use stat on 64bit linux libdnet: Upgrade to 1.16.3 python3-pyruvate: regenerate with updated bbclass monkey,webmin: Fix upstream patch status python3-pyruvate: Upgrade to 1.2.1 onig: Ignore .debug directories while finding ptests python3-h5py: Fix TMPDIR references in dbg files python3-pandas: Fix TMPDIR references in dbg files fwupd: Do not emit build time paths into generated headers libcereal: Fix TMPDIR leaking into debug_str section xmlrpc-c: Upgrade to 1.59.01 grilo: Fix buildpaths in generated header file python3-click: Fix ptest failure Leon Anavi (2): libpcsc-perl: Add recipe pcsc-tools: Add runtime dependencies Linus Jacobson (1): khronos-cts: Replace wayland feature dependancy with vulkan Markus Volk (40): nv-codec-headers: add clean target to Makefile flatpak: update 1.15.3 -> 1.15.4 libcamera: re-introduce fix for gcc-13 polkit-gnome: add recipe eog: update 43.2 -> 44.0 evince: update 43.1 -> 44.0 gdm: update 43.0 -> 44.0 gnome-calculator: update 43.0.1 -> 44.0 gnome-calendar: update 43.1 -> 44.0 gnome-desktop: update 43 -> 44.0 gnome-disk-utility: update 43.0 -> 44.0 gnome-font-viewer: update 43.0 -> 44.0 gnome-online-accounts: update 3.46.0 -> 3.48.0 gnome-photos: update 43.0 -> 44.0 gnome-session: update 43.0 -> 44.0 gnome-settings-daemon: update 43.0 -> 44.0 gnome-shell-extensions: update 43.1 -> 44.0 gnome-software: update 43.4 -> 44.0 gnome-terminal: update 3.46.7 -> 3.48.0 gnome-text-editor: update 43.1 -> 44.0 tracker-miners: update 3.4.2 -> 3.5.0 zenity: update 3.43.0 -> 3.44.0 xdg-desktop-portal-gnome: update 43.1 -> 44.0 gedit: update 43.2 -> 44.2 evolution-data-server: build oauth with gtk+3 file-roller: set cpio path manually libdecor: update 1.1.0 -> 1.1.99 freerdp: set PROXY_PLUGINDIR libnfs: add recipe pipewire: update 0.3.67 -> 0.3.68 iwd: update 2.3 -> 2.4 mozjs: update 102.5.0 -> 102.9.0 glibmm: fix reproducibility issues adw-gtk3: add recipe xdg-desktop-portal-wlr: update pipewire: remove 'inherit gsettings' polkit: update SRC_URI webp-pixbuf-loader: update 0.2.0 -> 0.2.4 udisks2: add PACKAGECONFIGs for btrfs,lvm2 and lsm pipewire: update 0.3.68 -> 0.3.70 Martin Jansa (7): zsh: fix installed-vs-shipped with multilib restinio: fix S variable in multilib builds mongodb: fix chown user for multilib builds pahole: respect libdir lvgl,lv-lib-png,lv-drivers: fix installed-vs-shipped QA issue with multilib dleyna-{server,renderer}: fix dev-so QA issue with multilib lirc: fix do_install with multilib Mingli Yu (2): mcelog: improve the ptest output php: Fix GCC 12 -Og Peter Johennecken (1): nginx: added packagegroup for webdav module Peter Kjellerstedt (5): python3-crc32c: Correct the license information paho-mqtt-cpp: Improve the license information autossh: Correct the license information paho-mqtt-c: Improve the license information recipes: Remove double protocol= from SRC_URIs Peter Marko (1): ntp: whitelist CVE-2019-11331 Petr Gotthard (2): cockpit: upgrade 276 -> 289 nftables: upgrade 1.0.6 -> 1.0.7 Randolph Sapp (1): glfw: add packageconfig and wayland dependencies Steffen Trumtrar (3): openocd: 0.11->0.12 openocd: fix jimtcl url openocd: enable jtag-vpi and buspirate Tim Orling (11): cli11: do not inherit ptest span-lite: do not inherit ptest ptest-packagelists-meta-oe.inc: add ptest recipes meta-oe-ptest*-image: enable BBCLASSEXTEND parallel execution ptest-packagelists-meta-python.inc: add ptest recipes meta-python-ptest*-image: enable BBCLASSEXTEND parallel execution python3-aspectlib: fix ptest ptest-packagelists-meta-perl.inc: add ptest recipes recipes-perl/packagegroups: move to recipes-core/ recipes-perl/images: move to recipes-core meta-perl-ptest*-image: enable BBCLASSEXTEND parallel execution Ulrich Ölmann (1): jwt-cpp: enable usage in an SDK Valeria Petrov (1): apache2: upgrade 2.4.56 -> 2.4.57 Virendra Thakur (2): p7zip: fix for CVE-2018-5996 p7zip: Fix for CVE-2016-9296 Wang Mingyu (117): abseil-cpp: upgrade 20230125.1 -> 20230125.2 libbytesize: upgrade 2.7 -> 2.8 gegl: upgrade 0.4.42 -> 0.4.44 ctags: upgrade 6.0.20230319.0 -> 6.0.20230402.0 libdeflate: upgrade 1.17 -> 1.18 libldb: upgrade 2.7.1 -> 2.7.2 ndisc6: upgrade 1.0.6 -> 1.0.7 libpfm4: upgrade 4.12.0 -> 4.13.0 libtraceevent: upgrade 1.7.1 -> 1.7.2 nginx: upgrade 1.23.3 -> 1.23.4 links: upgrade 2.28 -> 2.29 python3-pyproj: upgrade 3.4.1 -> 3.5.0 ostree: upgrade 2023.1 -> 2023.2 openvpn: upgrade 2.6.1 -> 2.6.2 python3-aenum: upgrade 3.1.11 -> 3.1.12 python3-argcomplete: upgrade 3.0.0 -> 3.0.5 python3-cassandra-driver: upgrade 3.25.0 -> 3.26.0 python3-astroid: upgrade 2.15.0 -> 2.15.1 python3-cmake: upgrade 3.26.0 -> 3.26.1 python3-dateparser: upgrade 1.1.7 -> 1.1.8 python3-google-api-python-client: upgrade 2.81.0 -> 2.83.0 python3-elementpath: upgrade 4.0.1 -> 4.1.0 python3-googleapis-common-protos: upgrade 1.58.0 -> 1.59.0 python3-httplib2: upgrade 0.21.0 -> 0.22.0 python3-google-auth: upgrade 2.16.2 -> 2.17.1 python3-ipython: upgrade 8.11.0 -> 8.12.0 python3-imageio: upgrade 2.26.0 -> 2.27.0 python3-pychromecast: upgrade 13.0.4 -> 13.0.6 python3-jdatetime: upgrade 4.1.0 -> 4.1.1 python3-luma-oled: upgrade 3.11.0 -> 3.12.0 python3-pydantic: upgrade 1.10.6 -> 1.10.7 python3-pymodbus: upgrade 3.2.1 -> 3.2.2 python3-pymisp: upgrade 2.4.169.2 -> 2.4.169.3 python3-pywbemtools: upgrade 1.1.1 -> 1.2.0 python3-redis: upgrade 4.5.1 -> 4.5.4 python3-regex: upgrade 2022.10.31 -> 2023.3.23 python3-typeguard: upgrade 3.0.1 -> 3.0.2 python3-sentry-sdk: upgrade 1.17.0 -> 1.18.0 python3-rich: upgrade 13.3.2 -> 13.3.3 python3-watchdog: upgrade 2.3.1 -> 3.0.0 feh: upgrade 3.9.1 -> 3.10 c-periphery: upgrade 2.3.1 -> 2.4.0 grilo-plugins: upgrade 0.3.15 -> 0.3.16 hwdata: upgrade 0.368 -> 0.369 hwloc: upgrade 2.9.0 -> 2.9.1 libconfig-tiny-perl: upgrade 2.28 -> 2.29 mg: upgrade 20221112 -> 20230406 python3-pillow: upgrade 9.4.0 -> 9.5.0 python3-websockets: upgrade 10.4 -> 11.0.1 poppler: upgrade 23.03.0 -> 23.04.0 python3-alembic: upgrade 1.10.2 -> 1.10.3 python3-astroid: upgrade 2.15.1 -> 2.15.2 python3-coverage: upgrade 7.2.2 -> 7.2.3 python3-google-api-python-client: upgrade 2.83.0 -> 2.84.0 python3-google-auth: upgrade 2.17.1 -> 2.17.2 python3-imgtool: upgrade 1.9.0 -> 1.10.0 python3-pychromecast: upgrade 13.0.6 -> 13.0.7 python3-simplejson: upgrade 3.18.4 -> 3.19.1 python3-networkx: upgrade 3.0 -> 3.1 tesseract: upgrade 5.3.0 -> 5.3.1 python3-zeroconf: upgrade 0.47.4 -> 0.55.0 python3-web3: upgrade 6.0.0 -> 6.1.0 python3-sqlalchemy: upgrade 2.0.7 -> 2.0.9 python3-sentry-sdk: upgrade 1.18.0 -> 1.19.1 hdf5: Fix install conflict when enable multilib. capnproto: upgrade 0.10.3 -> 0.10.4 ctags: upgrade 6.0.20230402.0 -> 6.0.20230416.0 mctp: upgrade 1.0 -> 1.1 php: upgrade 8.2.4 -> 8.2.5 openvpn: upgrade 2.6.2 -> 2.6.3 python3-croniter: upgrade 1.3.8 -> 1.3.14 python3-diskcache: upgrade 5.4.0 -> 5.5.1 python3-cmake: upgrade 3.26.1 -> 3.26.3 python3-elementpath: upgrade 4.1.0 -> 4.1.1 python3-google-api-python-client: upgrade 2.84.0 -> 2.85.0 python3-google-auth: upgrade 2.17.2 -> 2.17.3 python3-protobuf: upgrade 4.22.1 -> 4.22.3 python3-web3: upgrade 6.1.0 -> 6.2.0 python3-rich: upgrade 13.3.3 -> 13.3.4 python3-pymisp: upgrade 2.4.169.3 -> 2.4.170 python3-xlsxwriter: upgrade 3.0.9 -> 3.1.0 python3-zeroconf: upgrade 0.55.0 -> 0.56.0 remmina: upgrade 1.4.29 -> 1.4.30 tbb: upgrade 2021.8.0 -> 2021.9.0 sip: upgrade 6.7.7 -> 6.7.8 tcpdump: upgrade 4.99.3 -> 4.99.4 tcsh: upgrade 6.24.07 -> 6.24.10 evolution-data-server: upgrade 3.48.0 -> 3.48.1 babl: upgrade 0.1.102 -> 0.1.104 gensio: upgrade 2.6.2 -> 2.6.4 libopus: upgrade 1.3.1 -> 1.4 network-manager-applet: upgrade 1.30.0 -> 1.32.0 networkmanager: upgrade 1.42.4 -> 1.42.6 opencl-headers: upgrade 2023.02.06 -> 2023.04.17 c-periphery: upgrade 2.4.0 -> 2.4.1 mbw: upgrade 1.5 -> 2.0 libmodule-build-tiny-perl: upgrade 0.039 -> 0.043 python3-periphery: upgrade 2.3.0 -> 2.4.1 python3-astroid: upgrade 2.15.2 -> 2.15.3 python3-diskcache: upgrade 5.5.1 -> 5.6.1 python3-engineio: upgrade 4.4.0 -> 4.4.1 python3-soupsieve: upgrade 2.4 -> 2.4.1 python3-google-api-python-client: upgrade 2.85.0 -> 2.86.0 python3-mock: upgrade 5.0.1 -> 5.0.2 python3-pyalsaaudio: upgrade 0.9.2 -> 0.10.0 python3-icu: upgrade 2.10.2 -> 2.11 python3-pymisp: upgrade 2.4.170 -> 2.4.170.1 python3-python-vlc: upgrade 3.0.18121 -> 3.0.18122 python3-sentry-sdk: upgrade 1.19.1 -> 1.20.0 python3-pyscaffold: upgrade 4.4 -> 4.4.1 python3-websockets: upgrade 11.0.1 -> 11.0.2 python3-tornado: upgrade 6.2 -> 6.3 redis: upgrade 7.0.10 -> 7.0.11 python3-xmlschema: upgrade 2.2.2 -> 2.2.3 samba: upgrade 4.18.1 -> 4.18.2 ser2net: upgrade 4.3.11 -> 4.3.12 sip: upgrade 6.7.8 -> 6.7.9 Wentao Zhang (2): jemalloc: include the missing shell scripts and source the corresponds shell scripts for some test cases. nss: fix failed test of nss. Wolfgang Meyer (2): qrencode: add PACKAGECONFIG for command line tools qrencode: enable native build Yi Zhao (1): samba: upgrade 4.18.0 -> 4.18.1 Yogita Urade (1): dlt-daemon: fix CVE-2023-26257 Zoltán Böszörményi (2): hplip: Fix installation and QA libgusb: Allow building in native mode poky: 0907793d5e..cce6db2a59: Alex Kiernan (2): cargo_common.bbclass: Support local github repos rust: Upgrade 1.68.1 -> 1.68.2 Alexander Kanavin (5): rust: do not run separate build/install steps rust: install llvm item only once rust: update 1.67.1 -> 1.68.1 ffmpeg: update 5.1.2 -> 6.0 meta/recipes: ensure all recipes have a SUMMARY Arslan Ahmad (1): kernel-fitimage: Fix the default dtb config check Bartosz Golaszewski (5): python3-pyproject-hooks: add missing run-time dependencies python3-packaging: add missing run-time dependencies python3-manifest: add tomllib python3-manifest: add ensurepip python3-build: add missing run-time dependencies Bruce Ashfield (7): kernel: improve initramfs bundle processing time linux-yocto/6.1: update to v6.1.23 linux-yocto/5.15: update to v5.15.106 linux-yocto/6.1: update to v6.1.24 linux-yocto/5.15: update to v5.15.107 linux-yocto/6.1: update to v6.1.25 linux-yocto/5.15: update to v5.15.108 Chen Qi (1): bitbake: runqueue: fix PSI check calculation Chris Elledge (1): busybox: move hwclock init earlier in startup Denys Dmytriyenko (2): xz: upgrade 5.4.1 -> 5.4.2 grep: upgrade 3.9 -> 3.10 Dit Kozmaj (2): wic: use part_name when defined selftest: wic: Add test for --part-name argument Dmitry Baryshkov (1): linux-firmware: upgrade 20230210 -> 20230404 Enrico Jörns (10): oeqa/selftest/cases/runqemu: update imports oeqa/targetcontrol: fix misspelled RuntimeError oeqa/targetcontrol: do not set dump_host_cmds redundantly oeqa/targetcontrol: remove unused imports oeqa/utils/commands: fix usage of undefined EPIPE oeqa/utils/commands: remove unused imports oeqa/utils/qemurunner: replace hard-coded user 'root' in debug output oeqa/utils/qemurunner: limit precision of timing debugging output oeqa/utils/qemurunner: fix undefined TimeoutExpired oeqa: whitespace and indentation cleanups Enrico Scholz (2): bitbake: fetch2/crate: create versioned 'name' entries bitbake: cooker: do not abort on single ctrl-c Fabio Estevam (1): u-boot: Upgrade to 2023.04 Frank WOLFF (1): logrotate: add ptest support Frederic Martinsons (6): cargo_common.bbclass: add support of user in url for patch devtool: add support for multiple git url inside a cargo based recipe patch: support of git patches when the source uri contained subpath parameter meta-selftest: provide a recipe for zvariant cargo-update-recipe-crates: force name overrides bitbake: fetch2: Display all missing checksum at once Geoffrey GIRY (1): cve-extra-exclusions: ignore inapplicable linux-yocto CVEs Jan Vermaete (1): cve-update-nvd2-native: added the missing http import Kai Kang (2): libnotify: remove dependency dbus bitbake: bitbake: ConfHandler: Allow variable flag name with a single character Khem Raj (16): e2fsprogs: Define 64bit off_t on rv32 ffmpeg: Disable asm and rvv on riscv32 cargo: Fix build on musl/riscv musl: Update to latest trunk systemd: Refresh a musl patch to remove patch-fuzz with 253.3 musl-locales: Add Canadian French (fr_CA) locale support gawk: Disable known ptest fails on musl gawk: Remove redundant patch gawk: Add skipped.txt to emit test to ignore libxml2: Disable icu tests on musl apt-util: Fix ptest on musl lua: Disable locale dependent tests on musl attr: Disable attr.test on musl acl: Disable misc.test on musl fts: Fix typo in summary m4: Do not munge locale in ptests for musl Lee Chee Yang (2): migration-guides: add release-notes for 4.0.9 release-notes-4.2: update RC3 changes Luca Ceresoli (1): devicetree.bbclass: fix typo Marek Vasut (1): cpio: Fix wrong CRC with ASCII CRC for large files Mark Asselstine (2): oeqa/selftest/bblogging: uncomment python stdout checks python3-psutil: fix-up -tests runtime dependencies Mark Hatle (1): sanity.bbclass: Update minimum gcc version to 8.0 Markus Volk (1): at-spi2-core: update 2.46.0 -> 2.48.0 Marta Rybczynska (1): cve-update-nvd2-native: new CVE database fetcher Martin Jansa (8): selftest: imagefeatures.py: don't mix tabs and spaces for indentation selftest: runqemu: better check for ROOTFS: in the log selftest: runqemu: use better error message when asserts fail runqemu: respect IMAGE_LINK_NAME python3-cryptography-crates.inc: regenerate with updated bbclass python3-bcrypt-crates.inc: regenerate with updated bbclass selftest: efibootpartition.py: fix QEMU_USE_KVM usage populate_sdk_ext.bbclass: set METADATA_REVISION with an DISTRO override Michael Opdenacker (20): manuals: update disk space requirements manuals: add rm_work disk space data manuals: add minimum RAM requirements ref-manual: release-process.rst: update testing section ref-manual: release-process.rst: major updates manuals: add "LTS" term manuals: improve and fix target for supported distros ref-manual: variables: document VOLATILE_TMP_DIR migration-guides: update 4.2 migration and release notes ref-manual: classes.rst: document devicetree.bbclass ref-manual: remove unused and obsolete file ref-manual: variables.rst: add wikipedia shortcut for "getty" overview-manual: update section about source archives manuals: document SPDX_CUSTOM_ANNOTATION_VARS overview-manual: development-environment: update text and screenshots ref-manual: add "Mixin" term migration-guides: release-notes-4.0.9.rst: add missing SPDX info migration-guides: fixes and improvements to 4.2 release notes manuals: expand init manager documentation ref-manual: variables.rst: document KERNEL_DANGLING_FEATURES_WARN_ONLY Mikko Rapeli (2): oeqa ping.py: avoid busylooping failing ping command oeqa ping.py: fail test if target IP address has not been set Mingli Yu (3): report-error: catch Nothing PROVIDES error bitbake: event: add bb.event.ParseError report-error: make it catch ParseError error Ola x Nilsson (2): patch.py: Use shlex instead of deprecated pipe package: Use shlex instead of deprecated pipe Pascal Bach (1): cmake: add CMAKE_SYSROOT to generated toolchain file Paul Eggleton (20): bitbake: bitbake-user-manual: document BB_CACHEDIR bitbake: bitbake-user-manual: add addpylib and BB_GLOBAL_PYMODULES bitbake: bitbake-user-manual: add BB_HASH_CODEPARSER_VALS ref-manual: add new SDK_ZIP_OPTIONS variable ref-manual: Add new RUST_CHANNEL variable ref-manual: update for IMAGE_MACHINE_SUFFIX addition dev/ref-manual: Remove references to INC_PR ref-manual: add BB_CACHEDIR migration-guides: Add coverage of addpylib directive ref-manual: Remove references to package_tar class ref-manual: add missing QA checks from previous releases ref-manual: document new patch-status-* QA checks ref-manual: add FIT_CONF_DEFAULT_DTB ref-manual: add section link also to buildtools-extended entry ref-manual: add SDK_ARCHIVE_TYPE ref-manual: move Initramfs entry from variables to terms dev/ref-manual: Document INIT_MANAGER migration-guides: extend migration guide for 4.2 release-notes-4.1: fix some CVE links release-notes-4.2: add release notes Pavel Zhukov (2): scripts/rpm2cpio.sh: Use bzip2 instead of bunzip2 scripts/runqemu: Add possibility to disable network Pawan Badganchi (1): tiff: Add fix for CVE-2022-4645 Peter Kjellerstedt (1): cargo-update-recipe-crates.bbclass: Do not add name= to crate:// URIs Petr Kubizňák (12): harfbuzz: depend on glib-2.0-native json-glib: depend on glib-2.0-native libgudev: depend on glib-2.0-native at-spi2-core: depend on glib-2.0-native avahi: add missing dependencies graphene: add gobject-types PACKAGECONFIG python3-pygobject: depend on gobject-introspection gconf: add missing dependencies webkitgtk: add missing dependencies libnotify: depend on glib-2.0-native vte: depend on glib-2.0-native gobject-introspection: reduce dependencies Piotr Łobacz (1): libarchive: Enable acls, xattr for native as well as target Qiu Tingting (1): coreutils: Delete gcc sysroot parameter for ptest on target Randolph Sapp (1): wic/bootimg-efi: if fixed-size is set then use that for mkdosfs Richard Purdie (11): oeqa/loader: Ensure module names don't contain uppercase characters zvariant: Exclude from world for now to avoid reproducibility issues xdg-utils: Add a patch for CVE-2020-27748 cve-extra-exclusions.inc: Exclude some issues not present in linux-yocto xdg-utils: Fix CVE number bitbake: bitbake: Bump to version 2.4.0 build-appliance-image: Update to master head revision poky.conf: Bump version for 4.2 mickledore release build-appliance-image: Update to master head revision build-appliance-image: Update to master head revision cve-exclusions: Document some further linux-yocto CVE statuses Ross Burton (11): llvm: remove redundant CMake variables libgit2: clean up CMake variables webkitgtk: clean up Python variables oeqa/runtime: clean up deprecated backslash expansion classes-recipe/setuptools3-base: clean up FILES assignments bind: don't package non-existant .la files into -staticdev gstreamer1.0-plugins: package the internal libraries explicitly Increase minimum GCC version to 8.0 machine/qemuarm*: don't explicitly set vmalloc screen: backport fix for CVE-2023-24626 go: backport fix for CVE-2023-24537 Soumya (1): shadow: Fix can not print full login timeout message Svend Meyland Nicolaisen (1): bitbake: npmsw fetcher: Avoid instantiating Fetch class if url list is empty Thomas De Schampheleire (3): qemu: make tracetool-generated output reproducible qemu: retain default trace backend if 'ust' is not enabled qemu: rename deprecated --enable-trace-backend configure option Thomas Roos (2): oeqa/selftest: Use SSTATE_DIR of parent build dir oeqa/utils/metadata.py: Fix running oe-selftest running with no distro set Tobias Hagelborn (1): lib/oe/gpg_sign.py: Avoid race when creating .sig files in detach_sign Ulrich Ölmann (3): kernel-dev: fix typos ref-manual: classes.rst: fix typo bitbake: bitbake-user-manual: fix BB_RUNFMT's default value Wang Mingyu (46): apr: upgrade 1.7.2 -> 1.7.3 bind: upgrade 9.18.12 -> 9.18.13 cracklib: upgrade 2.9.10 -> 2.9.11 libhandy: upgrade 1.8.1 -> 1.8.2 libpcap: upgrade 1.10.3 -> 1.10.4 libsdl2: upgrade 2.26.3 -> 2.26.5 libsoup: upgrade 3.2.2 -> 3.4.0 mpg123: upgrade 1.31.2 -> 1.31.3 acpica: upgrade 20220331 -> 20230331 ccache: upgrade 4.7.4 -> 4.8 libcap: upgrade 2.67 -> 2.68 man-pages: upgrade 6.03 -> 6.04 mtools: upgrade 4.0.42 -> 4.0.43 pango: upgrade 1.50.13 -> 1.50.14 ruby: upgrade 3.2.1 -> 3.2.2 spirv-headers: upgrade 1.3.239.0 -> 1.3.243.0 spirv-tools: upgrade 1.3.239.0 -> 1.3.243.0 sqlite3: upgrade 3.41.0 -> 3.41.2 texinfo: upgrade 7.0.2 -> 7.0.3 wayland: upgrade 1.21.0 -> 1.22.0 wpebackend-fdo: upgrade 1.14.0 -> 1.14.2 xserver-xorg: upgrade 21.1.7 -> 21.1.8 xwayland: upgrade 22.1.8 -> 23.1.1 vala: upgrade 0.56.4 -> 0.56.6 python3-cython: upgrade 0.29.33 -> 0.29.34 python3-hypothesis: upgrade 6.68.2 -> 6.71.0 python3-importlib-metadata: upgrade 6.0.0 -> 6.2.0 python3-installer: upgrade 0.6.0 -> 0.7.0 python3-markdown: upgrade 3.4.1 -> 3.4.3 python3-pathspec: upgrade 0.11.0 -> 0.11.1 python3-pygobject: upgrade 3.42.2 -> 3.44.1 python3-pyopenssl: upgrade 23.0.0 -> 23.1.1 python3-pytz: upgrade 2022.7.1 -> 2023.3 python3-setuptools: upgrade 67.6.0 -> 67.6.1 mesa: upgrade 23.0.0 -> 23.0.2 systemd: upgrade 253.1 -> 253.3 libgit2: upgrade 1.6.3 -> 1.6.4 libsolv: upgrade 0.7.23 -> 0.7.24 libxml2: upgrade 2.10.3 -> 2.10.4 boost: upgrade 1.81.0 -> 1.82.0 ofono: upgrade 2.0 -> 2.1 python3-dtschema: upgrade 2023.1 -> 2023.4 python3-packaging: upgrade 23.0 -> 23.1 python3-pytest: upgrade 7.2.2 -> 7.3.1 stress-ng: upgrade 0.15.06 -> 0.15.07 gdb: Fix conflict of sframe-spec.info Wentao Zhang (1): python3: Fix failing sysconfig.py test on x86(64 bit) using lib64 as baselib by updating test_sysconfig for posix_user purelib Xiangyu Chen (1): shadow: backport patch to fix CVE-2023-29383 Yoann Congal (4): cve-extra-exclusions: ignore inapplicable linux-yocto CVEs cve-exclusions_6.1: ignore patched CVE-2022-38457 & CVE-2022-40133 cve-extra-exclusion: ignore disputed CVE-2023-23005 cve-extra-exclusions: linux-yocto: ignore fixed CVE-2023-1652 & CVE-2023-1829 Zhixiong Chi (1): libpam: Fix the xtests/tst-pam_motd[1|3] failures bkylerussell@gmail.com (1): kernel-devsrc: depend on python3-core instead of python3 meta-raspberrypi: 3afdbbf782..bf948e0aa8: Jesse Visser (2): recipe-bsp: Add support for Raspberry Pi Camera Module v3 docs: Update extra build config Raspberry Pi Camera Module section Rodrigo M. Duarte (1): python3-adafruit-blinka: Fix the correct python recipes path in dynamic-layer sub-dir meta-arm: 9b6c8c95e4..c60d7865dd: Adam Johnston (3): arm-bsp/optee: Update OP-TEE TA devkit to 3.20 for N1SDP CI: Remove ts-smm-gateway from N1SDP arm-bsp/trusted-firmware-a: Update N1SDP to v2.8.0 Denys Dmytriyenko (4): optee-os-tadevkit: remove old unused patches optee-client: add 3.20.0 version optee-test: add 3.20.0 version optee-examples: add 3.20.0 version Emekcan Aras (4): arm-bsp/trusted-firmware-m: apply patches correctly from external repos arm-bsp/trusted-firmware-m: Switch to TF-M BL1 in Corstone1000 arm-bsp/corstone1000: add OTP config for fvp arm-bsp/trusted-firmware-m: Increase assets number for corstone1000 Jon Mason (8): CI: dev kernel allow failure arm/linux-yocto: remove IP_VS config fragment CI: update to the latest kas version CI: track mickledore branch arm-bsp/tc1: Fix signed u-boot arm-bsp/tc1: Add FVP support arm/trusted-firmware-m-scripts: relocate to tfm directory arm-bsp/tc1: disable signed kernel image Peter Hoyes (1): arm/scp-firmware: Add support for components other than SCP, MCP Ross Burton (8): arm/scp-firmware: add recipe for 2.11 arm-bsp/scp-firmware: move all machines to SCP 2.11 arm/scp-firmware: remove 2.10 recipe arm/trusted-firmware-m: add the tf-m-extras repository that some machines need arm/trusted-firmware-m: clean up environment flags arm/trusted-firmware-m: package .elf files in PN-dbg arm-bsp/trusted-firmware-m: enable for Total Compute on RSS CI: add TF-M to TC build Rui Miguel Silva (1): arm-bsp/corstone1000: tf-m set/get fwu, private metadata using gpt Xueliang Zhong (3): arm-bsp/n1sdp-board-firmware: update to newer SHA arm-bsp/optee-os: N1SDP support for optee-os 3.20 arm-bsp/n1sdp: use edk2-firmware 202211 version Signed-off-by: Patrick Williams <patrick@stwcx.xyz> Change-Id: I68eb48f27b781da34c4a7636f9b3bb1507b46416 2022-07-20T19:59:28+00:00 Andrew Geissler geissonator@yahoo.com 2022-07-15T19:00:58+00:00 urn:sha1:615f2f11d3f46e3eae642475495a7ca4cfddc49e poky: ee0d001b81..4161dbbbd6: Aatir Manzur (1): docs: add CONVERSION_CMD definition Ahmed Hossam (1): insane.bbclass: host-user-contaminated: Correct per package home path Alejandro Hernandez Samaniego (1): package.bbclass: Fix base directory for debugsource files when using externalsrc Alex Kiernan (1): python3-cryptography: Cleanup DEPENDS/RDEPENDS Alexander Kanavin (53): mesa: update 22.0.3 -> 22.1.2 python3-numpy: update 1.22.3 -> 1.22.4 python3-setuptools: update 62.3.2 -> 62.5.0 vulkan: upgrade 1.3.211.0 -> 1.3.216.0 lttng-modules: update 2.13.3 -> 2.13.4 go: update 1.18.2 -> 1.18.3 ell: update 0.50 -> 0.51 libdrm: update 2.4.110 -> 2.4.111 diffoscope: upgrade 215 -> 216 dos2unix: upgrade 7.4.2 -> 7.4.3 librsvg: upgrade 2.54.3 -> 2.54.4 puzzles: upgrade to latest revision sudo: upgrade 1.9.10 -> 1.9.11p2 wireless-regdb: upgrade 2022.04.08 -> 2022.06.06 x264: upgrade to latest revision python3-requests: upgrade 2.27.1 -> 2.28.0 oeqa/sdk: drop the nativesdk-python 2.x test python3-hatch-vcs: fix upstream version check at: take tarballs from debian pango: exclude 1.9x versions which are 2.x pre-releases. adwaita-icon-theme: upgrade 41.0 -> 42.0 rust: update 1.60.0 -> 1.62.0 weston: update 10.0.0 -> 10.0.1 python3-setuptools-scm: upgrade 6.4.2 -> 7.0.3 waffle: correctly request wayland-scanner executable openssl: update 3.0.4 -> 3.0.5 diffoscope: upgrade 216 -> 217 glib-2.0: upgrade 2.72.2 -> 2.72.3 glib-networking: upgrade 2.72.0 -> 2.72.1 gstreamer1.0: upgrade 1.20.2 -> 1.20.3 harfbuzz: upgrade 4.3.0 -> 4.4.1 kmod: upgrade 29 -> 30 libsoup: upgrade 3.0.6 -> 3.0.7 mesa: upgrade 22.1.2 -> 22.1.3 mpg123: upgrade 1.29.3 -> 1.30.0 nghttp2: upgrade 1.47.0 -> 1.48.0 piglit: upgrade to latest revision pulseaudio: upgrade 16.0 -> 16.1 python3-cffi: upgrade 1.15.0 -> 1.15.1 python3-cryptography: upgrade 37.0.2 -> 37.0.3 python3-cryptography-vectors: upgrade 37.0.2 -> 37.0.3 python3-hatchling: upgrade 1.3.0 -> 1.3.1 python3-hypothesis: upgrade 6.46.11 -> 6.48.2 python3-jsonschema: upgrade 4.6.0 -> 4.6.1 python3-mako: upgrade 1.2.0 -> 1.2.1 python3-pycryptodomex: upgrade 3.14.1 -> 3.15.0 python3-requests: upgrade 2.28.0 -> 2.28.1 python3-setuptools: upgrade 62.5.0 -> 62.6.0 python3-sphinx: upgrade 5.0.0 -> 5.0.2 xcb-proto: upgrade 1.15 -> 1.15.2 procps: restrict version check to 3.x ncurses: mark upstream version as unknown wayland: update 1.20.0 -> 1.21.0 Alexandre Belloni (1): oeqa/selftest/bbtests: Update message lookup for test_git_unpack_nonetwork_fail Aryaman Gupta (5): buildstats.py: enable collection of /proc/pressure data pybootchartgui: render cpu and io pressure buildstats.bbclass: correct sampling of system stats buildstats.py: close /proc/pressure/cpu file descriptor buildperf/base.py: skip reduced_proc_pressure directory Bruce Ashfield (29): perf: fix reproducibility in 5.19+ linux-yocto/5.10: update to v5.10.121 linux-yocto/5.15: update to v5.15.46 linux-yocto/5.15: update to v5.15.48 linux-yocto/5.10: update to v5.10.123 linux-yocto-dev: bump to v5.19-rc linux-yocto/5.15: drop obselete GPIO sysfs ABI lttng-modules: fix 5.19+ build kernel-devsrc: fix reproducibility and buildpaths QA warning linux-yocto/5.15: update to v5.15.52 linux-yocto/5.10: update to v5.10.128 kernel-devsrc: ppc32: fix reproducibility linux-yocto/5.15: fix qemuppc buildpaths warning linux-yocto/5.15: fix build_OID_registry buildpaths warning yocto-bsps: update to v5.10.128 and buildpaths fixes yocto-bsps: update to v5.15.52 and buildpaths fixes linux-yocto/5.10: fix build_OID_registry/conmakehash buildpaths warning linux-yocto/5.10: fix buildpaths issue with gen-mach-types linux-yocto/5.15: fix buildpaths issue with gen-mach-types yocto-bsps/5.10: fix buildpaths issue with gen-mach-types yocto-bsps/5.15: fix buildpaths issue with gen-mach-types linux-yocto/5.15: update to v5.15.54 linux-yocto/5.15: fix buildpaths issue with pnmtologo linux-yocto/5.10: update to v5.10.130 linux-yocto/5.10: fix buildpaths issue with pnmtologo yocto-bsps/5.10: fix buildpaths issue with pnmtologo yocto-bsps/5.15: fix buildpaths issue with pnmtologo yocto-bsps: update to v5.15.54 yocto-bsps: update to v5.10.130 Christoph Lauer (1): package.bbclass: Avoid stripping signed kernel modules in splitdebuginfo David Bagonyi (1): sanity.bbclass: Add ftps to accepted URI protocols for mirrors sanity Dmitry Baryshkov (1): linux-firmware: upgrade 20220509 -> 20220610 Enrico Scholz (6): npm: replace 'npm pack' call by 'tar czf' npm: return content of 'package.json' in 'npm_pack' npm: take 'version' directly from 'package.json' npm: disable 'audit' + 'fund' lib:npm_registry: initial checkin npm: use npm_registry to cache package Federico Pellegrin (1): signing-keys: fix RDEPENDS to signing-keys-dev Gennaro Iorio (1): bitbake: fetch2: gitsm: fix incorrect handling of git submodule relative urls He Zhe (1): curl: Fix build failure for qemuriscv64 Jacob Kroon (1): bitbake: bitbake-user-manual: Correct description of the ??= operator Jose Quaresma (3): archiver: don't use machine variables in shared recipes sstate: Use the python3 ThreadPoolExecutor instead of the OE ThreadedPool oe/utils: remove the ThreadedPool Joshua Watt (1): classes/create-spdx: Add SPDX_PRETTY option Kai Kang (1): glibc-tests: not clear BBCLASSEXTEND Khem Raj (2): libmodule-build-perl: Use env utility to find perl interpreter ltp: Remove -mfpmath=sse on x86 Luca Ceresoli (1): llvm: add PACKAGECONFIG[optviewer] Lucas Stach (1): perf: sort-pmuevents: really keep array terminators Marius Kriegerowski (1): scriptutils: fix style to be more PEP8 compliant Marta Rybczynska (2): cve-check: add support for Ignored CVEs oeqa/selftest/cve_check: add tests for Ignored and partial reports Martin Jansa (3): mesa: backport a patch to support compositors without zwp_linux_dmabuf_v1 again wic: fix WicError message bitbake: fetch2/git: show SRCREV and git repo in error message about fixed SRCREV Maxime Roussin-Bélanger (1): libffi: fix native build being not portable Michael Halstead (2): releases: include 3.1.17 releases: include 4.0.2 Michael Opdenacker (18): rootfs-postcommands.bbclass: correct comments dev-manual: mention the new CVE patch metrics page dev-manual: fix references to BitBake user manual docs: standards.md: add more rules: line wrapping and variables doc: standard for bulleted lists ref-manual: add description for the "sysroot" term manuals: update host tool requirements ref-manual: document SSTATE_EXCLUDEDEPS_SYSROOT ref-manual: document SYSTEMD_DEFAULT_TARGET ref-manual: IMAGE_FEATURES: add allow-root-login and correct allow-empty-password ref-manual: correct description of empty-root-passwd in IMAGE_FEATURES bitbake: doc: bitbake-user-manual: add explicit target for crates fetcher bitbake: doc: bitbake-user-manual: document npm and npmsw fetchers dev-manual: NPM packages: minor grammar fix manuals: switch to the sstate mirror shared between all versions manuals: replace hyphens with em dashes dev-manual: update section about creating NPM packages dev-manual: improve screenshot resolution Ming Liu (3): udev-extraconf: fix some systemd automount issues meta: introduce UBOOT_MKIMAGE_KERNEL_TYPE udev-extraconf:mount.sh: fix path mismatching issues Mingli Yu (1): vim: not adjust script pathnames for native scripts either Muhammad Hamza (6): initramfs-framework: move storage mounts to actual rootfs udev-extraconf/mount.sh: add LABELs to mountpoints udev-extraconf/mount.sh: save mount name in our tmp filecache udev-extraconf/mount.sh: only mount devices on hotplug udev-extraconf: force systemd-udevd to use shared MountFlags udev-extraconf/mount.sh: ignore lvm in automount Nick Potenski (1): systemd: systemd-systemctl: Support instance conf files during enable Ola x Nilsson (1): bitbake: ConfHandler: Remove lingering close Pascal Bach (1): bin_package: install into base_prefix Paul Eggleton (4): devtool: ignore pn- overrides when determining SRC_URI overrides patch: handle if S points to a subdirectory of a git repo devtool: finish: handle patching when S points to subdir of a git repo oe-selftest: devtool: test modify git recipe building from a subdir Paulo Neves (14): python: Avoid shebang overflow on python-config.py gtk-doc: Fix potential shebang overflow on gtkdoc-mkhtml2 ref-manual: SYSTEMD_SERVICE allows multiple services ref-manual: SYSTEMD_SERVICE overrides depend on SYSTEMD_PACKAGES insane.bbclass: Make do_qa_staging check shebangs oeqa/selftest: Add test for shebang overflow oeqa/selftest: Test staged .la and .pc files utils: Add cmdline_shebang_wrapper util. libcheck: Fix too long shebang for native case. utils: create_cmdline_shebang_wrapper whitespace and sed refactor utils: create_cmdline_shebang_wrapper preserve permission and ownership oeqa/sysroot.py: Check bitbake return status bitbake: fetch: bb.fatal when trying to checksum non-existing files oeqa: test_invalid_recipe_src_uri expect parse time error Pavel Zhukov (4): systemd: Add missed sys/file.h includes for musl systemd: Rebase patches on v251 bitbake: tests/fetch: Add test for broken mirror tarball systemd: update upstream status of merged patches Peter Bergin (2): systemd: add packageconfig for sysext rust: fix issue building cross-canadian tools for aarch64 on x86_64 Peter Kjellerstedt (2): ref-manual: Add documentation for INCOMPATIBLE_LICENSE_EXCEPTIONS base.bbclass: Correct the test for obsolete license exceptions Peter Marko (1): alsa-state: correct license Pgowda (1): binutils : CVE-2019-1010204 Quentin Schulz (3): docs: releases: move hardknott and honister to outdated section docs: conf.py: bump minimum Sphinx version requirement Revert "docs: conf.py: fix cve extlinks caption for sphinx <4.0" Raju Kumar Pothuraju (2): runqemu: add QB_KERNEL_CMDLINE kernel-uboot.bbclass: Use vmlinux.initramfs when INITRAMFS_IMAGE_BUNDLE set Richard Purdie (42): gcc-source: Fix incorrect task dependencies from ${B} vim: Upgrade 8.2.5034 -> 8.2.5083 local.conf.sample: Update sstate url to new 'all' path ref/dev-manual: Update multiconfig documentation oeqa/runtime/scp: Disable scp test for dropbear unzip: Port debian fixes for two CVEs elfutils/flex: Disable parallel make ptest compile bitbake: server/process: Fix logging issues where only the first message was displayed coreutils: Tweak packaging variable names for coreutils-dev packagegroup-core-ssh-dropbear: Add openssh-sftp-server recommendation bitbake.conf/recipes: Introduce add DEV_PKG_DEPENDENCY to change RDEPENDS:${PN}-dev bitbake.conf: Change -dev RDEPENDS to RRECOMMENDS vim: 8.2.5083 -> 9.0.0005 ncurses: 6.3 -> 6.3+20220423 oe-selftest-image: Ensure the image has sftp as well as dropbear cve-extra-exclusions: Clean up and ignore three CVEs (2xqemu and nasm) openssl: Upgrade 3.0.3 -> 3.0.4 insane: Fix buildpaths test to work with special devices go: Filter build paths on staticly linked arches glibc-tests: Avoid reproducibility issues gperf: Add a patch to work around reproducibility issues bitbake: ConfHandler/BBHandler: Improve comment error messages and add tests icon-naming-utils: Resurrect for sato-icon-theme sato-icon-theme: Add back with support for scalable icons lua: Fix multilib buildpath reproducibility issues vala: Fix on target wrapper buildpaths issue gtk-doc: Remove hardcoded buildpath gperf: Switch to upstream patch qemu: Avoid accidental librdmacm linkage kernel-arch: Fix buildpaths leaking into external module compiles qemu: Fix slirp determinism issue qemu: Add PACKAGECONFIG for brlapi gcc-runtime: Fix build when using gold insane: Add buildpaths to WARN_QA by default insane: Reword staging to refer to populate_sysroot bitbake: fetch2: Ensure directory exists before creating symlink bitbake: fetch2: Drop DL_DIR fallback for local file fetcher oeqa/selftest/sstatetests: Update test to work with bitbake changes gcc-runtime: Fix missing MLPREFIX in debug mappings insane: Drop debug exclusion from buildpaths test selftest/runtime_test/virgl: Disable for all almalinux local.conf.sample: Mention other MACHINE options may exist Robert Joslyn (1): curl: Update to 7.84.0 Ross Burton (24): python3: fix a race condition in the test_socket.testSockName test Add python3-editables (from meta-python) Add python3-pathspec (from meta-python) Add python3-hatchling (from meta-oe) python3-hatch-vcs: add new recipe python3-jsonschema: upgrade 4.5.1 -> 4.6.0 package_manager: Change complementary package handling to not include soft dependencies cups: ignore CVE-2022-26691 cve-check: hook cleanup to the BuildCompleted event, not CookerExit busybox: fix CVE-2022-30065 ncurses: use GitHub mirror, not Debian's packaging ltp: remove open-posix-testsuite build logs tiff: backport the fix for CVE-2022-2056, CVE-2022-2057, and CVE-2022-2058 perl: don't install Makefile.old into perl-ptest vim: upgrade to 9.0.0021 ltp: fix builds when host ld doesn't know about target ELF formats python3-setuptools-scm: add missing python3-typing-extensions dependency python3-flit-core: bootstrap explicitly python3-installer: bootstrap by installing installer with installer python3-picobuild: add new recipe python_pep517: use picobuild instead of manually calling the API classes: remove obsolete PEP517_BUILD_API python3-hatchling: remove PEP517_BUILD_API documentation: remove obsolete PEP517_BUILD_API Steve Sakoman (3): qemu: add PACKAGECONFIG for capstone qemu: Avoid accidental libvdeplug linkage ruby: add PACKAGECONFIG for capstone Sundeep KOKKONDA (2): glibc: stable 2.35 branch updates binutils : stable 2.38 branch updates Thomas Perrot (1): opensbi: Update to v1.1 Thomas Roos (1): recipetool/devtool: Fix python egg whitespace issues in PACKAGECONFIG Xu Huan (2): python3: upgrade 3.10.4 -> 3.10.5 python3-magic: upgrade 0.4.26 -> 0.4.27 Yi Zhao (2): popt: fix override syntax in RDEPENDS git: fix override syntax in RDEPENDS Yogesh Tyagi (2): testimage : remove curl-ptest from rpm index curl : Add ptest Yue Tao (1): gnupg: upgrade to 2.3.7 to fix CVE-2022-34903 Yulong (Kevin) Liu (1): python3-pyasn1: Eliminated ptest deprecation warnings aatir (1): docs: make DISTRO_FEATURES description more explicit niko.mauno@vaisala.com (3): ptest.bbclass: Honor PARALLEL_MAKE, PARALLEL_MAKEINST valgrind: Drop redundant oe_runmake parameter strace: Drop redundant oe_runmake parameter pgowda (1): gcc: Backport a fix for gcc bug 105039 ssuesens (3): weston.py: added xwayland test weston.init: enabled xwayland xwayland.weston-start: adaption of X11-unix folder wangmy (57): btrfs-tools: upgrade 5.18 -> 5.18.1 ethtool: upgrade 5.17 -> 5.18 file: upgrade 5.41 -> 5.42 libx11: upgrade 1.8 -> 1.8.1 lighttpd: upgrade 1.4.64 -> 1.4.65 gnu-config: update to latest version musl-obstack: upgrade 1.1 -> 1.2 piglit: upgrade to latest revision stress-ng: upgrade 0.14.01 -> 0.14.02 erofs-utils: upgrade 1.4 -> 1.5 alsa-lib: upgrade 1.2.7 -> 1.2.7.1 alsa-plugins: upgrade 1.2.6 -> 1.2.7.1 alsa-ucm-conf: upgrade 1.2.7 -> 1.2.7.1 bind: upgrade 9.18.3 -> 9.18.4 kbd: upgrade 2.5.0 -> 2.5.1 libproxy: upgrade 0.4.17 -> 0.4.18 python3-dbusmock: upgrade 0.27.5 -> 0.28.0 sbc: upgrade 1.5 -> 2.0 strace: upgrade 5.17 -> 5.18 python3-chardet: upgrade 4.0.0 -> 5.0.0 python3-importlib-metadata: upgrade 4.11.4 -> 4.12.0 python3-babel: upgrade 2.10.1 -> 2.10.3 python3-certifi: upgrade 2022.5.18.1 -> 2022.6.15 python3-dbusmock: upgrade 0.28.0 -> 0.28.1 python3-numpy: upgrade 1.22.4 -> 1.23.0 python3-pycryptodome: upgrade 3.14.1 -> 3.15.0 dmidecode: upgrade 3.3 -> 3.4 git: upgrade 2.36.1 -> 2.37.0 harfbuzz: upgrade 4.3.0 -> 4.4.0 speexdsp: upgrade 1.2.0 -> 1.2.1 speex: upgrade 1.2.0 -> 1.2.1 repo: upgrade 2.26 -> 2.27 sqlite3: upgrade 3.38.5 -> 3.39.0 sudo: upgrade 1.9.11p2 -> 1.9.11p3 createrepo-c: upgrade 0.20.0 -> 0.20.1 gst-devtools: upgrade 1.20.2 -> 1.20.3 gstreamer1.0-libav: upgrade 1.20.2 -> 1.20.3 gstreamer1.0-omx: upgrade 1.20.2 -> 1.20.3 gstreamer1.0-plugins-bad: upgrade 1.20.2 -> 1.20.3 gstreamer1.0-plugins-base: upgrade 1.20.2 -> 1.20.3 gstreamer1.0-plugins-good: upgrade 1.20.2 -> 1.20.3 gstreamer1.0-plugins-ugly: upgrade 1.20.2 -> 1.20.3 gstreamer1.0-python: upgrade 1.20.2 -> 1.20.3 gstreamer1.0-rtsp-server: upgrade 1.20.2 -> 1.20.3 gstreamer1.0-vaapi: upgrade 1.20.2 -> 1.20.3 inetutils: upgrade 2.2 -> 2.3 python3-atomicwrites: upgrade 1.4.0 -> 1.4.1 python3-cryptography: upgrade 37.0.3 -> 37.0.4 python3-cryptography-vectors: upgrade 37.0.3 -> 37.0.4 python3-hatchling: upgrade 1.3.1 -> 1.5.0 python3-imagesize: upgrade 1.3.0 -> 1.4.1 python3-jsonschema: upgrade 4.6.1 -> 4.7.1 python3-numpy: upgrade 1.23.0 -> 1.23.1 python3-typing-extensions: upgrade 4.2.0 -> 4.3.0 python3-urllib3: upgrade 1.26.9 -> 1.26.10 init-system-helpers: upgrade 1.63 -> 1.64 dpkg: upgrade 1.21.8 -> 1.21.9 meta-security: 8c6fe006a1..7ad5f6a9da: Armin Kuster (32): apparmor: fix ownership issues sssd:move to dynamic networking-layer layer.conf:add meta-netorking to BBFILES_DYNAMIC packagegroup-core-security: drop sssd packagegroup-core-security.bbappend: add sssd oeqa: fix checksec runtime test sssd: use example conf file oeqa: sssd.py fix tests sssd: update to 2.7.1 security-test-image: auto include layers if present. smack-test: more py3 covertion oeqa: update smack runtime test aide: add a few more config options oeqa: add aide test libmhash: add native pkg support classes: add aide routines aide: add native support for build time db creation aide.conf: adjust to allow for build time db creation firejail: Add new package oeqa: Add a very basic firejail test packagegroup-core-security: add firejail security-test-image: add firejail and aide test suites oeqa/clamav drop depricated --list-mirror test oeqa: meta-tpm shut swtpm down before and after testing oeqa: shut done swtpm before and after testing ccs-tools: update to 1.8.9 lynis: update to 3.0.8 README: update email address packagegroup-core-security: skip mips firejail chipsec: update to 1.8.5 security-build-image: add lkrg-module to build image lkrg: update to 0.9.3 Jeremy A. Puhlman (2): clamav: make install owner match the added user name python3-privacyidea: add correct path to lib/privacyidea Jose Quaresma (1): meta-integrity: kernel-modsign: prevents splitting out debug symbols Yi Zhao (1): aide: fix typo meta-openembedded: 11df15765c..31c10bd3e6: Adrian Freihofer (3): firewalld: update to 1.1.1 fixes ptest firewalld: upgrade 1.1.1 -> 1.2.0 libqmi: upgrade 1.30.4 -> 1.30.8 Akash Hadke (2): ntfs-3g-ntfsprogs: Set CVE_PRODUCT to "tuxera:ntfs-3g" iperf: Set CVE_PRODUCT to "iperf_project:iperf" Alex Kiernan (2): jansson: Upgrade 2.13.1 -> 2.14 nftables: Upgrade 1.0.2 -> 1.0.4 Alex Stewart (1): openvpn: distribute sample-config-files Andreas Müller (1): glmark2: Build with meson Andrej Valek (1): poco: upgrade 1.11.3 -> 1.12.0 Andrew Davis (1): libsdl: The libsdl and libsdl2 are not virtual Ashish Sharma (1): netserver: don't change permissions on /dev/null Aurélien Bertron (1): fix(syslog-ng): warning about conf version Bartosz Golaszewski (1): python3-pybluez: fix a runtime issue with python 3.10 Ben Powell (1): python3-can: Add typing-extensions dependency Changqing Li (3): chrony: create /var/lib/chrony by systemd-tmpfiles redis: upgrade 6.2.6 -> 6.2.7 redis: upgrade 7.0.0 to 7.0.2 Chen Qi (2): apache2: split out a new package apache2-utils ntfs-3g-ntfsprogs: upgrade to 2022.5.17 Daide Li (1): python3-iperf: initial add 0.1.11 Davide Gardenal (9): usrsctp: add CVE_VERSION to correctly check for CVEs ntp: ignore many CVEs openflow: ignore CVE-2018-1078 emlog: ignore unrelated CVEs imagemagick: upgrade 7.0.10-25 -> 7.0.10-62 wireshark: upgrade 3.4.11 -> 3.4.12 thrift: add CVE_PRODUCT to fix CVE reporting spice: ignore patched CVEs quagga: ignore CVE-2016-4049 Fabien Parent (1): gpsd-machine-conf: allow creation of an empty package Harshal (1): lldpd: upgrade 1.0.8 -> 1.0.14 Hitendra Prajapati (1): cyrus-sasl: CVE-2022-24407 failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands Jan Vermaete (1): netdata: version bump 1.34.1 -> 1.35.0 Javier Viguera (1): networkmanager: fix build with enabled ppp Jeremy Puhlman (1): freeradius: mutlilib fixes Jonas Gorski (1): abseil-cpp: do not enforce -mfpu=neon on arm Kai Kang (4): libdbi-perl: fix interpreter on shebang line libdev-checklib-perl: fix interpreter of script use-devel-checklib libparse-yapp-perl: update interpreter of yapp python3-flatbuffer: enable native Khem Raj (8): libxml++: Disable parallel make in ptest compile geos: Disable inlining php: Fix absolute paths to php in phar.phar scripts libspiro: Add recipe fontforge: Upgrade to 20220308 opencv: Link with libatomic on mips fontforge: Use alternate way to detect libm opencv: Link with libatomic on rv32 Leon Anavi (19): python3-traitlets: Upgrade 5.2.1 -> 5.3.0 python3-humanize: Upgrade 4.1.0 -> 4.2.0 python3-autobahn: Upgrade 22.4.2 -> 22.5.1 python3-elementpath: Upgrade 2.5.0 -> 2.5.3 python3-eth-hash: Upgrade 0.3.2 -> 0.3.3 python3-serpent: Upgrade 1.40 -> 1.41 python3-web3: Upgrade 5.29.1 -> 5.29.2 python3-pika: Upgrade 1.2.1 -> 1.3.0 python3-tabulate: Upgrade 0.8.9 -> 0.8.10 python3-marshmallow: Upgrade 3.15.0 -> 3.17.0 python3-pychromecast: Upgrade 12.1.3 -> 12.1.4 python3-humanize: Upgrade 4.2.0 -> 4.2.3 python3-tornado: Upgrade 6.1 -> 6.2 python3-coverage: Upgrade 6.3.2 -> 6.4.1 python3-email-validator: Upgrade 1.1.3 -> 1.2.1 python3-networkx: Upgrade 2.7.1 -> 2.8.4 python3-unidiff: Upgrade 0.7.3 -> 0.7.4 python3-toolz: Upgrade 0.11.2 -> 0.12.0 python3-ansi2html: Upgrade 1.7.0 -> 1.8.0 Marcus Flyckt (1): python3-pyconnman: Add 'future' runtime dependency Markus Volk (1): flatbuffers: update to 2.0.6 Martin Jansa (3): glmark2: fix compatibility with python-3.11 leveldb: switch from master branch to main tesseract-lang: switch from master branch to main Mikko Rapeli (1): polkit: switch back to mozjs but leave duktape as PACKAGECONFIG option Mingli Yu (3): kronosnet: Fix build with gcc-12 s-nail: Fix build with gcc-12 mariadb: Upgrade to 10.8.3 Pascal Bach (1): python3-pybind11: upgrade 2.8.1 -> 2.9.2 Peter Kjellerstedt (1): cryptsetup: Add support for building without SSH tokens Ross Burton (5): python3-cbor2: upgrade 5.4.2 to 5.4.3 cppzmq: fix -dev RDEPENDS python3-hatchling: remove (now in oe-core) python3-pathspec: remove (now in oe-core) python3-editables: remove (now in oe-core) Sakib Sajal (1): minicoredumper: retry elf parsing as long as needed Theodore A. Roth (1): crda: Depend on correct wireless-regdb package Wentao Zhang (1): protobuf-c: update to 1.4.1 fix CVE-2022-33070 Xu Huan (20): python3-lxml: upgrade 4.8.0 -> 4.9.0 python3-msgpack: upgrade 1.0.3 -> 1.0.4 python3-protobuf: upgrade 3.20.1 -> 4.21.1 python3-mypy: upgrade 0.960 -> 0.961 python3-pylint: upgrade 2.13.9 -> 2.14.1 python3-smbus2: upgrade 0.4.1 -> 0.4.2 python3-pillow: upgrade 9.0.1 -> 9.1.1 python3-pychromecast: upgrade 12.1.2 -> 12.1.3 python3-pylint: upgrade 2.14.1 -> 2.14.3 python3-pyscaffold: upgrade 4.2.2 -> 4.2.3 python3-redis: upgrade 4.3.1 -> 4.3.3 python3-aiohue: upgrade 4.4.1 -> 4.4.2 python3-astroid: upgrade 2.11.5 -> 2.11.6 python3-charset-normalizer: upgrade 2.0.12 -> 2.1.0 python3-colorama: upgrade 0.4.4 -> 0.4.5 python3-eth-typing: upgrade 3.0.0 -> 3.1.0 python3-autobahn: upgrade 22.5.1 -> 22.6.1 python3-awesomeversion: upgrade 22.5.2 -> 22.6.0 python3-grpcio: upgrade 1.45.0 -> 1.47.0 python3-lxml: upgrade 4.9.0 -> 4.9.1 Yi Zhao (12): openldap: pass correct URANDOM_DEVICE to CPPFLAGS openvpn: eliminate build path from openvpn --version option grubby: fix syntax for ALTERNATIVE duktape: fix override syntax in RDEPENDS polkit-group-rule-udisks2: fix override syntax in RDEPENDS libcrypt-openssl-guess-perl: fix syntax for PROVIDES evince: fix typo for RRECOMMENDS blueman: fix typo for RRECOMMENDS dnsmasq: Security fix CVE-2022-0934 strongswan: upgrade 5.9.5 -> 5.9.6 openvpn: add PACKAGECONFIG for systemd openvpn: add PACKAGECONFIG for selinux Yue Tao (2): exo: upgrade 4.16.3 -> 4.16.4 dlt-daemon: upgrade to commit 6a3bd901d8 to fix CVE-2022-31291 Zoltán Böszörményi (5): opencv: Upgrade to version 4.6.0 proj: Upgrade to 8.2.1 python3-pyproj: New recipe for pyproj version 3.3.1 geos: Upgrade to 3.9.3 libspatialite: Upgrade to 5.0.1 jybros (1): clinfo: use virtual opencl loader provider wangmy (72): python3-cantools: upgrade 37.0.7 -> 37.1.0 python3-regex: upgrade 2022.4.24 -> 2022.6.2 python3-sqlalchemy: upgrade 1.4.36 -> 1.4.37 python3-twine: upgrade 4.0.0 -> 4.0.1 python3-waitress: upgrade 2.1.1 -> 2.1.2 python3-xmlschema: upgrade 1.11.0 -> 1.11.1 gspell: upgrade 1.10.0 -> 1.11.1 ctags: upgrade 5.9.20220529.0 -> 5.9.20220605.0 feh: upgrade 3.8 -> 3.9 inotify-tools: upgrade 3.22.1.0 -> 3.22.6.0 apache2: upgrade 2.4.53 -> 2.4.54 libnftnl: upgrade 1.2.1 -> 1.2.2 nbdkit: upgrade 1.31.7 -> 1.31.8 irssi: upgrade 1.2.3 -> 1.4.1 musl-nscd: upgrade 1.0.2 -> 1.1.0 rdma-core: upgrade 40.0 -> 41.0 snort: upgrade 2.9.19 -> 2.9.20 php: upgrade 8.1.6 -> 8.1.7 poco: upgrade 1.11.2 -> 1.11.3 pyxdg: upgrade 0.27 -> 0.28 syslog-ng: upgrade 3.36.1 -> 3.37.1 dnf-plugin-tui: Added postatinstall python3-dill: upgrade 0.3.4 -> 0.3.5.1 python3-robotframework-seriallibrary: upgrade 0.3.1 -> 0.4.3 python3-ujson: upgrade 5.1.0 -> 5.3.0 python3-watchdog: upgrade 2.1.8 -> 2.1.9 python3-websocket-client: upgrade 1.3.2 -> 1.3.3 gnome-commander: upgrade 1.14.2 -> 1.14.3 libwacom: upgrade 2.2.0 -> 2.3.0 nbdkit: upgrade 1.31.8 -> 1.31.9 googletest: upgrade 1.11.0 -> 1.12.0 gperftools: upgrade 2.9.1 -> 2.10 iwd: upgrade 1.27 -> 1.28 libzip: upgrade 1.8.0 -> 1.9.0 postgresql: upgrade 14.3 -> 14.4 uftrace: upgrade 0.11 -> 0.12 python3-googleapis-common-protos: upgrade 1.56.2 -> 1.56.3 python3-ifaddr: upgrade 0.1.7 -> 0.2.0 python3-jmespath: upgrade 1.0.0 -> 1.0.1 python3-pandas: upgrade 1.4.2 -> 1.4.3 python3-zeroconf: upgrade 0.38.6 -> 0.38.7 geocode-glib: upgrade 3.26.2 -> 3.26.3 gnome-bluetooth: upgrade 42.0 -> 42.1 gnome-calculator: upgrade 42.0 -> 42.2 gnome-text-editor: upgrade 42.1 -> 42.2 gtk4: upgrade 4.6.4 -> 4.6.6 gtksourceview5: upgrade 5.4.1 -> 5.4.2 gvfs: upgrade 1.50.0 -> 1.50.2 abseil-cpp: upgrade 20211102 -> 20220623 capnproto: upgrade 0.9.1 -> 0.10.2 ctags: upgrade 5.9.20220605.0 -> 5.9.20220703.0 fwupd: upgrade 1.7.6 -> 1.8.1 googletest: upgrade 1.12.0 -> 1.12.1 nautilus: upgrade 42.1.1 -> 42.2 nbdkit: upgrade 1.31.9 -> 1.31.10 openconnect: upgrade 8.20 -> 9.01 bats: upgrade 1.6.1 -> 1.7.0 cloc: upgrade 1.92 -> 1.94 hwdata: upgrade 0.360 -> 0.361 libvpx: upgrade 1.11.0 -> 1.12.0 libzip: upgrade 1.9.0 -> 1.9.2 pegtl: upgrade 3.2.5 -> 3.2.6 phoronix-test-suite: upgrade 10.8.3 -> 10.8.4 poppler: upgrade 22.06.0 -> 22.07.0 netdata: upgrade 1.35.0 -> 1.35.1 evince: upgrade 42.2 -> 42.3 gjs: upgrade 1.72.0 -> 1.72.1 gnome-bluetooth: upgrade 42.1 -> 42.2 libadwaita: upgrade 1.1.1 -> 1.1.2 liburing: upgrade 2.1 -> 2.2 libcrypt-openssl-rsa-perl: upgrade 0.32 -> 0.33 libencode-perl: upgrade 3.17 -> 3.18 zhengruoqin (23): python3-absl: upgrade 1.0.0 -> 1.1.0 python3-alembic: upgrade 1.7.7 -> 1.8.0 python3-asyncinotify: upgrade 2.0.3 -> 2.0.4 python3-crc32c: upgrade 2.2.post0 -> 2.3 python3-msk: upgrade 0.3.16 -> 0.4.0 python3-bitstruct: upgrade 8.14.1 -> 8.15.1 python3-google-api-python-client: upgrade 2.49.0 -> 2.50.0 python3-google-auth: upgrade 2.6.6 -> 2.7.0 python3-xmlschema: upgrade 1.11.1 -> 1.11.2 python3-flask-wtf: upgrade 0.15.1 -> 1.0.1 python3-gnupg: upgrade 0.4.8 -> 0.4.9 python3-google-api-python-client: upgrade 2.50.0 -> 2.51.0 python3-kiwisolver: upgrade 1.4.2 -> 1.4.3 python3-nmap: upgrade 1.5.1 -> 1.5.4 python3-asyncinotify: upgrade 2.0.4 -> 2.0.5 python3-google-auth: upgrade 2.7.0 -> 2.8.0 python3-protobuf: upgrade 4.21.1 -> 4.21.2 python3-sqlalchemy: upgrade 1.4.37 -> 1.4.39 python3-xmlschema: upgrade 1.11.2 -> 1.11.3 python3-engineio: upgrade 4.3.2 -> 4.3.3 python3-google-api-core: upgrade 2.8.0 -> 2.8.2 python3-google-auth: upgrade 2.8.0 -> 2.9.0 python3-grpcio-tools: upgrade 1.46.3 -> 1.47.0 Signed-off-by: Andrew Geissler <geissonator@yahoo.com> Change-Id: I22f0dab7f3253d77cc99fd462c6be45ddeb333cd